Analysis

  • max time kernel
    3s
  • max time network
    43s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22-12-2023 14:17

General

  • Target

    bd3e056d6f91d319c9c83d2a96fe4d7f.exe

  • Size

    6.5MB

  • MD5

    bd3e056d6f91d319c9c83d2a96fe4d7f

  • SHA1

    d8a5fac5ff48a23517aeee61f3785d702612f7d0

  • SHA256

    be899c46cecbce4e234f9ffa5016eb8aaeadd81c2783032b4e11b6db57c8958d

  • SHA512

    d3e9e061706eab44864e734225bcb4103772d55d751fd08e869fdd4b1e63de138375ab73082c8ecde4e63f7c516d959697777ca1e11e2e4f155b5dcc5e8479c7

  • SSDEEP

    49152:EQFRHrmQG+trBSRHrmQG+trsrBSRHrmQG+trGrBSRHrdrmQG+trBSRHrmQG+trsG:EcKXKAKegXKAKS

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\bd3e056d6f91d319c9c83d2a96fe4d7f.exe
    "C:\Users\Admin\AppData\Local\Temp\bd3e056d6f91d319c9c83d2a96fe4d7f.exe"
    1⤵
      PID:216
      • C:\Users\Admin\AppData\Local\Temp\kyeb.exe
        C:\Users\Admin\AppData\Local\Temp\kyeb.exe -run C:\Users\Admin\AppData\Local\Temp\bd3e056d6f91d319c9c83d2a96fe4d7f.exe
        2⤵
          PID:4460

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • C:\Users\Admin\AppData\Local\Temp\kyeb.exe

        Filesize

        57KB

        MD5

        b51b0aec4c1bd443b2a9649dfca9e5ef

        SHA1

        21e297daa3a9ccbe2ec19f51baa5b6a3c0d02e95

        SHA256

        597d37146350fef75accf1b03a4bc71d8c8606120536d2f7be89139526dffa30

        SHA512

        068ca0eb462457b0778734a385c33eac4e91e6fb8867b97bb5b18288aa0e6191beb1084e98b0a04db0ef6876ae19236ba8b273c105852cd8b3f49203e172165a

      • C:\Users\Admin\AppData\Local\Temp\kyeb.exe

        Filesize

        32KB

        MD5

        247af6fc4b184a68b669351e6aced1a2

        SHA1

        8f10ea11231eae745d162a4be3d19fb354c1ab22

        SHA256

        57e480c13416a1c258aaf87a6d9f5f65c17b95af7e091284d85b49fccb84d06f

        SHA512

        64b29a0cb1d6b48c14b5dbcbeff3a0ad70dde0d69baf043ce4040389879c62d62d3c7f4927c10cae4e3c81039a7c3979125803c1b8a34636d22f1307b327cd4e

      • memory/216-51-0x0000000002E60000-0x0000000002F60000-memory.dmp

        Filesize

        1024KB

      • memory/216-22-0x00000000025D0000-0x00000000025D1000-memory.dmp

        Filesize

        4KB

      • memory/216-55-0x0000000002E60000-0x0000000002F60000-memory.dmp

        Filesize

        1024KB

      • memory/216-58-0x0000000002E60000-0x0000000002F60000-memory.dmp

        Filesize

        1024KB

      • memory/216-24-0x0000000002600000-0x0000000002601000-memory.dmp

        Filesize

        4KB

      • memory/216-31-0x0000000002E60000-0x0000000002F60000-memory.dmp

        Filesize

        1024KB

      • memory/216-36-0x0000000002E60000-0x0000000002F60000-memory.dmp

        Filesize

        1024KB

      • memory/216-37-0x0000000002E60000-0x0000000002F60000-memory.dmp

        Filesize

        1024KB

      • memory/216-38-0x0000000002E60000-0x0000000002F60000-memory.dmp

        Filesize

        1024KB

      • memory/216-40-0x0000000002E60000-0x0000000002F60000-memory.dmp

        Filesize

        1024KB

      • memory/216-44-0x0000000002E60000-0x0000000002F60000-memory.dmp

        Filesize

        1024KB

      • memory/216-48-0x0000000002E60000-0x0000000002F60000-memory.dmp

        Filesize

        1024KB

      • memory/216-54-0x0000000002E60000-0x0000000002F60000-memory.dmp

        Filesize

        1024KB

      • memory/216-19-0x0000000002580000-0x0000000002581000-memory.dmp

        Filesize

        4KB

      • memory/216-21-0x00000000025E0000-0x00000000025E1000-memory.dmp

        Filesize

        4KB

      • memory/216-61-0x0000000002E60000-0x0000000002E61000-memory.dmp

        Filesize

        4KB

      • memory/216-62-0x0000000000400000-0x0000000000536000-memory.dmp

        Filesize

        1.2MB

      • memory/216-64-0x0000000002E60000-0x0000000002E61000-memory.dmp

        Filesize

        4KB

      • memory/216-0-0x0000000000400000-0x0000000000536000-memory.dmp

        Filesize

        1.2MB

      • memory/216-1-0x00000000022D0000-0x0000000002320000-memory.dmp

        Filesize

        320KB

      • memory/216-2-0x00000000024B0000-0x00000000024B1000-memory.dmp

        Filesize

        4KB

      • memory/216-63-0x00000000022D0000-0x0000000002320000-memory.dmp

        Filesize

        320KB

      • memory/216-60-0x0000000002E60000-0x0000000002F60000-memory.dmp

        Filesize

        1024KB

      • memory/4460-65-0x0000000002680000-0x0000000002681000-memory.dmp

        Filesize

        4KB

      • memory/4460-67-0x0000000002CB0000-0x0000000002CB1000-memory.dmp

        Filesize

        4KB

      • memory/4460-66-0x0000000002AD0000-0x0000000002AD1000-memory.dmp

        Filesize

        4KB