Overview

overview

6

Static

static

3

0031c3dab3...0c.exe

windows7-x64

6

0031c3dab3...0c.exe

windows10-2004-x64

6

Analysis

  • max time kernel
    140s
  • max time network
    117s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    29/12/2023, 18:15

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    0031c3dab3195fd1d4921c5e4615da0c.exe

  • Size

    508KB

  • MD5

    0031c3dab3195fd1d4921c5e4615da0c

  • SHA1

    4e12f1e3d2cd4a53345f20a304446fc124505dc2

  • SHA256

    0df170bfcdfaf56d1bbbcedaff12fc2f9d84ad6b673b9f18723f02de960c97ba

  • SHA512

    e694df4e060b893a311133080a2ca427582eeb967642b81c19929ac1517c19b34c05558aab8c840bf3fcf684473ace821e854f44605ece136ae814df7d72f000

  • SSDEEP

    6144:kPyZSQSRlJnKIPdH7dQ6jRKn2vetByDQU7MCW15hPd6aGIfEY2ar/XJztrl9DF2:yQSRlJnKIhk2vemjWThPoMhH9DI

Score
6/10
persistence

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0031c3dab3195fd1d4921c5e4615da0c.exe
    "C:\Users\Admin\AppData\Local\Temp\0031c3dab3195fd1d4921c5e4615da0c.exe"
    1⤵
    • Adds Run key to start application
    • Drops file in Windows directory
    PID:2992

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2992-0-0x00000000001B0000-0x00000000001B1000-memory.dmp

          Filesize

          4KB

          Download

        • memory/2992-5-0x0000000000400000-0x0000000000486000-memory.dmp

          Filesize

          536KB

          Download

        • memory/2992-7-0x00000000001B0000-0x00000000001B1000-memory.dmp

          Filesize

          4KB

          Download