Analysis

  • max time kernel
    150s
  • max time network
    156s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/12/2023, 14:25

General

  • Target

    ZHatsel_voobraZHenie_fair_press.exe

  • Size

    1.3MB

  • MD5

    bff3a76a207ccacef6aa04a6289349db

  • SHA1

    a58926a7451d30a523722f2b4fa01da8bbbf9af7

  • SHA256

    bcaefa26b9c0bbf420eea72cc6733fcbbfb876af17f1a08a6e379b81e4c7a453

  • SHA512

    78140d59c2f242fcb957023f897182978906017bdf48c4628d1e75c4de1de6b9d26359fa6e350253d80ce6303797310a37c8f157fff9b85160a772d78fb4f37e

  • SSDEEP

    24576:zTTMNmap6OKAWe1ULELc8TA/DFYnxNZjP7aEoK/cRgOnmq9g6H/NPJZPmcbD:XTeBp6J9e1ULEI8TAQzZjP7vcOU7m6HD

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\ZHatsel_voobraZHenie_fair_press.exe
    "C:\Users\Admin\AppData\Local\Temp\ZHatsel_voobraZHenie_fair_press.exe"
    1⤵
      PID:4880

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4880-0-0x0000000000400000-0x00000000007FB000-memory.dmp

      Filesize

      4.0MB

    • memory/4880-1-0x0000000002600000-0x0000000002660000-memory.dmp

      Filesize

      384KB

    • memory/4880-2-0x00000000025E0000-0x00000000025E1000-memory.dmp

      Filesize

      4KB

    • memory/4880-3-0x00000000009D0000-0x00000000009D1000-memory.dmp

      Filesize

      4KB

    • memory/4880-5-0x00000000009C0000-0x00000000009C1000-memory.dmp

      Filesize

      4KB

    • memory/4880-4-0x0000000002690000-0x0000000002691000-memory.dmp

      Filesize

      4KB

    • memory/4880-7-0x0000000002660000-0x0000000002661000-memory.dmp

      Filesize

      4KB

    • memory/4880-6-0x00000000026B0000-0x00000000026B1000-memory.dmp

      Filesize

      4KB

    • memory/4880-9-0x0000000003730000-0x0000000003731000-memory.dmp

      Filesize

      4KB

    • memory/4880-8-0x00000000026A0000-0x00000000026A1000-memory.dmp

      Filesize

      4KB

    • memory/4880-11-0x0000000003720000-0x0000000003722000-memory.dmp

      Filesize

      8KB

    • memory/4880-10-0x0000000002680000-0x0000000002681000-memory.dmp

      Filesize

      4KB

    • memory/4880-12-0x00000000026F0000-0x00000000026F1000-memory.dmp

      Filesize

      4KB

    • memory/4880-13-0x00000000026E0000-0x00000000026E1000-memory.dmp

      Filesize

      4KB

    • memory/4880-14-0x0000000002740000-0x0000000002741000-memory.dmp

      Filesize

      4KB

    • memory/4880-15-0x0000000002710000-0x0000000002711000-memory.dmp

      Filesize

      4KB

    • memory/4880-16-0x00000000026D0000-0x00000000026D1000-memory.dmp

      Filesize

      4KB

    • memory/4880-17-0x0000000002860000-0x0000000002861000-memory.dmp

      Filesize

      4KB

    • memory/4880-18-0x00000000028B0000-0x00000000028B1000-memory.dmp

      Filesize

      4KB

    • memory/4880-19-0x00000000028A0000-0x00000000028A1000-memory.dmp

      Filesize

      4KB

    • memory/4880-21-0x00000000028D0000-0x00000000028D1000-memory.dmp

      Filesize

      4KB

    • memory/4880-20-0x0000000002890000-0x0000000002891000-memory.dmp

      Filesize

      4KB

    • memory/4880-22-0x00000000028F0000-0x00000000028F1000-memory.dmp

      Filesize

      4KB

    • memory/4880-23-0x0000000002700000-0x0000000002701000-memory.dmp

      Filesize

      4KB

    • memory/4880-25-0x0000000003770000-0x0000000003771000-memory.dmp

      Filesize

      4KB

    • memory/4880-24-0x0000000003770000-0x0000000003771000-memory.dmp

      Filesize

      4KB

    • memory/4880-27-0x0000000003770000-0x0000000003771000-memory.dmp

      Filesize

      4KB

    • memory/4880-29-0x0000000003770000-0x0000000003771000-memory.dmp

      Filesize

      4KB

    • memory/4880-26-0x0000000003770000-0x0000000003771000-memory.dmp

      Filesize

      4KB

    • memory/4880-30-0x0000000003770000-0x0000000003771000-memory.dmp

      Filesize

      4KB

    • memory/4880-28-0x0000000003770000-0x0000000003771000-memory.dmp

      Filesize

      4KB

    • memory/4880-32-0x0000000003790000-0x0000000003791000-memory.dmp

      Filesize

      4KB

    • memory/4880-31-0x0000000003770000-0x0000000003771000-memory.dmp

      Filesize

      4KB

    • memory/4880-33-0x0000000003770000-0x0000000003771000-memory.dmp

      Filesize

      4KB

    • memory/4880-34-0x0000000003770000-0x0000000003771000-memory.dmp

      Filesize

      4KB

    • memory/4880-35-0x0000000003770000-0x0000000003771000-memory.dmp

      Filesize

      4KB

    • memory/4880-36-0x0000000003770000-0x0000000003771000-memory.dmp

      Filesize

      4KB

    • memory/4880-37-0x0000000003770000-0x0000000003771000-memory.dmp

      Filesize

      4KB

    • memory/4880-39-0x0000000003770000-0x0000000003771000-memory.dmp

      Filesize

      4KB

    • memory/4880-38-0x0000000003770000-0x0000000003771000-memory.dmp

      Filesize

      4KB

    • memory/4880-40-0x0000000003770000-0x0000000003771000-memory.dmp

      Filesize

      4KB

    • memory/4880-41-0x0000000003770000-0x0000000003771000-memory.dmp

      Filesize

      4KB

    • memory/4880-42-0x0000000003770000-0x0000000003771000-memory.dmp

      Filesize

      4KB

    • memory/4880-43-0x0000000003770000-0x0000000003771000-memory.dmp

      Filesize

      4KB

    • memory/4880-44-0x0000000003770000-0x0000000003771000-memory.dmp

      Filesize

      4KB

    • memory/4880-45-0x0000000003770000-0x0000000003771000-memory.dmp

      Filesize

      4KB

    • memory/4880-46-0x0000000003770000-0x0000000003771000-memory.dmp

      Filesize

      4KB

    • memory/4880-47-0x0000000003770000-0x0000000003771000-memory.dmp

      Filesize

      4KB

    • memory/4880-48-0x0000000003770000-0x0000000003771000-memory.dmp

      Filesize

      4KB

    • memory/4880-49-0x0000000003770000-0x0000000003771000-memory.dmp

      Filesize

      4KB

    • memory/4880-50-0x0000000003770000-0x0000000003771000-memory.dmp

      Filesize

      4KB

    • memory/4880-51-0x0000000003770000-0x0000000003771000-memory.dmp

      Filesize

      4KB

    • memory/4880-52-0x00000000026C0000-0x00000000026C1000-memory.dmp

      Filesize

      4KB

    • memory/4880-53-0x00000000026C0000-0x00000000026C1000-memory.dmp

      Filesize

      4KB

    • memory/4880-54-0x00000000026C0000-0x00000000026C1000-memory.dmp

      Filesize

      4KB

    • memory/4880-55-0x00000000026C0000-0x00000000026C1000-memory.dmp

      Filesize

      4KB

    • memory/4880-56-0x00000000026C0000-0x00000000026C1000-memory.dmp

      Filesize

      4KB

    • memory/4880-57-0x00000000026C0000-0x00000000026C1000-memory.dmp

      Filesize

      4KB

    • memory/4880-58-0x00000000026C0000-0x00000000026C1000-memory.dmp

      Filesize

      4KB

    • memory/4880-59-0x00000000026C0000-0x00000000026C1000-memory.dmp

      Filesize

      4KB

    • memory/4880-61-0x00000000009B0000-0x00000000009B1000-memory.dmp

      Filesize

      4KB

    • memory/4880-60-0x0000000000890000-0x0000000000891000-memory.dmp

      Filesize

      4KB

    • memory/4880-63-0x0000000003750000-0x0000000003751000-memory.dmp

      Filesize

      4KB

    • memory/4880-62-0x0000000003760000-0x0000000003761000-memory.dmp

      Filesize

      4KB

    • memory/4880-68-0x0000000000400000-0x00000000007FB000-memory.dmp

      Filesize

      4.0MB

    • memory/4880-71-0x0000000000400000-0x00000000007FB000-memory.dmp

      Filesize

      4.0MB