Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/12/2023, 01:59

General

  • Target

    4b149b91f88e9f04305a9d0371db9763.exe

  • Size

    2.4MB

  • MD5

    4b149b91f88e9f04305a9d0371db9763

  • SHA1

    c88df2393d9883be7b8963eaaf026baf942c312a

  • SHA256

    142c5c31dd4457486dff4766e46d2d6ad1d070f37f3ebdff72790509b771b50f

  • SHA512

    35b5a38e2f1bb7d23234e48e4d0ecf157acec530bdd8b7a72a23fd8e82529050fe03d266c99d131209d478d215d336bc0f48eee94f2ea0c78d50780deff55fbd

  • SSDEEP

    6144:UhaoeOgn6N0Rf1mVqlMRtY+b7s2F0iLFl+kdTf7YPm0zJOqCo9NYNCA2N:U4/OU6mV1Oq+RtF7HC5k1f7YPkz0Yt2N

Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4b149b91f88e9f04305a9d0371db9763.exe
    "C:\Users\Admin\AppData\Local\Temp\4b149b91f88e9f04305a9d0371db9763.exe"
    1⤵
    • Drops file in Windows directory
    PID:5032

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/5032-6-0x0000000001710000-0x0000000001711000-memory.dmp

    Filesize

    4KB

  • memory/5032-8-0x0000000001740000-0x0000000001741000-memory.dmp

    Filesize

    4KB

  • memory/5032-26-0x0000000004D10000-0x0000000004D11000-memory.dmp

    Filesize

    4KB

  • memory/5032-31-0x0000000004060000-0x0000000004061000-memory.dmp

    Filesize

    4KB

  • memory/5032-30-0x0000000001940000-0x0000000001941000-memory.dmp

    Filesize

    4KB

  • memory/5032-29-0x0000000001970000-0x0000000001971000-memory.dmp

    Filesize

    4KB

  • memory/5032-28-0x0000000001960000-0x0000000001961000-memory.dmp

    Filesize

    4KB

  • memory/5032-27-0x0000000001950000-0x0000000001951000-memory.dmp

    Filesize

    4KB

  • memory/5032-25-0x0000000004D00000-0x0000000004D01000-memory.dmp

    Filesize

    4KB

  • memory/5032-24-0x0000000004CF0000-0x0000000004CF1000-memory.dmp

    Filesize

    4KB

  • memory/5032-20-0x0000000004CC0000-0x0000000004CEF000-memory.dmp

    Filesize

    188KB

  • memory/5032-19-0x0000000004460000-0x0000000004461000-memory.dmp

    Filesize

    4KB

  • memory/5032-18-0x0000000001790000-0x0000000001791000-memory.dmp

    Filesize

    4KB

  • memory/5032-17-0x0000000001770000-0x0000000001771000-memory.dmp

    Filesize

    4KB

  • memory/5032-16-0x0000000004CB0000-0x0000000004CB1000-memory.dmp

    Filesize

    4KB

  • memory/5032-15-0x0000000004CA0000-0x0000000004CA1000-memory.dmp

    Filesize

    4KB

  • memory/5032-14-0x0000000004480000-0x0000000004481000-memory.dmp

    Filesize

    4KB

  • memory/5032-13-0x0000000004470000-0x0000000004471000-memory.dmp

    Filesize

    4KB

  • memory/5032-12-0x0000000004450000-0x0000000004451000-memory.dmp

    Filesize

    4KB

  • memory/5032-11-0x0000000004440000-0x0000000004441000-memory.dmp

    Filesize

    4KB

  • memory/5032-36-0x00000000042D0000-0x00000000042D1000-memory.dmp

    Filesize

    4KB

  • memory/5032-10-0x0000000001780000-0x0000000001781000-memory.dmp

    Filesize

    4KB

  • memory/5032-9-0x0000000001760000-0x0000000001761000-memory.dmp

    Filesize

    4KB

  • memory/5032-7-0x0000000001730000-0x0000000001731000-memory.dmp

    Filesize

    4KB

  • memory/5032-5-0x0000000000FE0000-0x0000000000FE1000-memory.dmp

    Filesize

    4KB

  • memory/5032-4-0x00000000016D0000-0x00000000016D1000-memory.dmp

    Filesize

    4KB

  • memory/5032-3-0x00000000016C0000-0x00000000016C1000-memory.dmp

    Filesize

    4KB

  • memory/5032-2-0x00000000016B0000-0x00000000016B1000-memory.dmp

    Filesize

    4KB

  • memory/5032-1-0x0000000000FF0000-0x0000000000FF1000-memory.dmp

    Filesize

    4KB

  • memory/5032-0-0x0000000000FD0000-0x0000000000FD1000-memory.dmp

    Filesize

    4KB

  • memory/5032-37-0x00000000042D0000-0x00000000042D1000-memory.dmp

    Filesize

    4KB