Analysis

  • max time kernel
    155s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231023-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/11/2023, 21:41

General

  • Target

    35da7aab0d190d5aeb04eaaa179c1cbd2302004c7671d6c71bc078a3df97d652.exe

  • Size

    274KB

  • MD5

    59e1227450eb946f0eb83fad2f72b1f5

  • SHA1

    b78400bfe2fb0dbe892b1dff5220a7de2c43dfc6

  • SHA256

    35da7aab0d190d5aeb04eaaa179c1cbd2302004c7671d6c71bc078a3df97d652

  • SHA512

    19fd57f8a026cd2cc64f4d8ac99538b9d90f9a33a3d70c2061131ea5094a53fa0c4bf23a6adaf51d06bdd799236860311cb4f67e7503ac43259461aedfeda1c2

  • SSDEEP

    3072:QlnO9lcF4LS5ZUsBHS9R071uEcR647ovb3Trh6e:UnXKL+By9R0ooMMrT

Score
10/10

Malware Config

Signatures

  • Tofsee

    Backdoor/botnet which carries out malicious activities based on commands from a C2 server.

Processes

  • C:\Users\Admin\AppData\Local\Temp\35da7aab0d190d5aeb04eaaa179c1cbd2302004c7671d6c71bc078a3df97d652.exe
    "C:\Users\Admin\AppData\Local\Temp\35da7aab0d190d5aeb04eaaa179c1cbd2302004c7671d6c71bc078a3df97d652.exe"
    1⤵
      PID:4236

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/4236-1-0x00000000006E0000-0x00000000007E0000-memory.dmp

            Filesize

            1024KB

          • memory/4236-2-0x0000000000500000-0x0000000000513000-memory.dmp

            Filesize

            76KB

          • memory/4236-3-0x0000000000400000-0x00000000004F9000-memory.dmp

            Filesize

            996KB