Analysis

  • max time kernel
    10s
  • max time network
    19s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    31-12-2023 02:32

General

  • Target

    24968516a3be6baf400316997f31a140.exe

  • Size

    4.6MB

  • MD5

    24968516a3be6baf400316997f31a140

  • SHA1

    b7782f247b08a7be6c0dd6b81d1fa8789087470b

  • SHA256

    6ccd76919498fb367af3c9513b7e4f093a71aa5f4fa50286c840d8a398832d7d

  • SHA512

    9ba930938083d58d18bad574faa348242027748853ac8fdf2c7fe60e1d06d3eec3024c5f7f7ba35c76466983abb4c24eac4346c963136ad05f8a1f4214a27674

  • SSDEEP

    49152:EQFRHrmQG+yrY+Fr/rcrSIrSB+FrbrmQG+y3rcrSIrSB+FF:EcKP4

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\24968516a3be6baf400316997f31a140.exe
    "C:\Users\Admin\AppData\Local\Temp\24968516a3be6baf400316997f31a140.exe"
    1⤵
      PID:1856
      • C:\Users\Admin\AppData\Local\Temp\y.exe
        C:\Users\Admin\AppData\Local\Temp\y.exe -run C:\Users\Admin\AppData\Local\Temp\24968516a3be6baf400316997f31a140.exe
        2⤵
          PID:4248

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • C:\Users\Admin\AppData\Local\Temp\y.exe

        Filesize

        423KB

        MD5

        dccfa25df1c53e5bee9c40b3c3b0d92f

        SHA1

        90697126a679fe8c35cd8d19ad232120e7600026

        SHA256

        3cc0e4044036668e0cf24bdfba8e0e63fe93e3145783219b54a62a6b31416020

        SHA512

        889a1f5041f6e3c221741d2deb10d79737c787f4ec0e7eca44cd47f4fbd9ad05669c8e3fbd97cd8a004fa9734b92581f5124af7d4cd962eb83acbb8f5c0a0040

      • C:\Users\Admin\AppData\Local\Temp\y.exe

        Filesize

        522KB

        MD5

        f5eb84dbb193469f5203cd54ed27e51d

        SHA1

        442995cf919eec175c9d0f849f75196bcafbbf78

        SHA256

        822c0e33dafbe67e2cde8ae439eb9c7ed87866b784102db6929cc3e00a565551

        SHA512

        369e250101b46943977cf5f9ec0192e2a6aaf09c422f6a6c74955f45810812b8043d9f0f680742eebda7418f62b849c8c906b569e89ff08b870a14bdbede2a8b

      • memory/1856-0-0x0000000000400000-0x0000000000536000-memory.dmp

        Filesize

        1.2MB

      • memory/1856-1-0x0000000000860000-0x00000000008B0000-memory.dmp

        Filesize

        320KB

      • memory/1856-4-0x00000000008B0000-0x00000000008B1000-memory.dmp

        Filesize

        4KB

      • memory/1856-3-0x0000000002460000-0x0000000002461000-memory.dmp

        Filesize

        4KB

      • memory/1856-5-0x0000000002480000-0x0000000002481000-memory.dmp

        Filesize

        4KB

      • memory/1856-2-0x00000000024A0000-0x00000000024A1000-memory.dmp

        Filesize

        4KB

      • memory/1856-6-0x00000000006F0000-0x00000000006F1000-memory.dmp

        Filesize

        4KB

      • memory/1856-8-0x00000000024B0000-0x00000000024B1000-memory.dmp

        Filesize

        4KB

      • memory/1856-7-0x0000000002470000-0x0000000002471000-memory.dmp

        Filesize

        4KB

      • memory/1856-9-0x0000000002DB0000-0x0000000002DB1000-memory.dmp

        Filesize

        4KB

      • memory/1856-10-0x0000000002490000-0x0000000002491000-memory.dmp

        Filesize

        4KB

      • memory/1856-11-0x0000000002DA0000-0x0000000002DA2000-memory.dmp

        Filesize

        8KB

      • memory/1856-12-0x0000000002570000-0x0000000002571000-memory.dmp

        Filesize

        4KB

      • memory/1856-13-0x0000000002530000-0x0000000002531000-memory.dmp

        Filesize

        4KB

      • memory/1856-14-0x0000000002520000-0x0000000002521000-memory.dmp

        Filesize

        4KB

      • memory/1856-15-0x0000000002550000-0x0000000002551000-memory.dmp

        Filesize

        4KB

      • memory/1856-16-0x0000000002510000-0x0000000002511000-memory.dmp

        Filesize

        4KB

      • memory/1856-18-0x0000000002540000-0x0000000002541000-memory.dmp

        Filesize

        4KB

      • memory/1856-19-0x0000000002580000-0x0000000002581000-memory.dmp

        Filesize

        4KB

      • memory/1856-20-0x0000000002590000-0x0000000002591000-memory.dmp

        Filesize

        4KB

      • memory/1856-21-0x0000000002620000-0x0000000002621000-memory.dmp

        Filesize

        4KB

      • memory/1856-23-0x00000000025D0000-0x00000000025D1000-memory.dmp

        Filesize

        4KB

      • memory/1856-24-0x0000000002600000-0x0000000002601000-memory.dmp

        Filesize

        4KB

      • memory/1856-25-0x00000000025C0000-0x00000000025C1000-memory.dmp

        Filesize

        4KB

      • memory/1856-26-0x00000000025F0000-0x00000000025F1000-memory.dmp

        Filesize

        4KB

      • memory/1856-27-0x0000000002610000-0x0000000002611000-memory.dmp

        Filesize

        4KB

      • memory/1856-22-0x00000000025E0000-0x00000000025E1000-memory.dmp

        Filesize

        4KB

      • memory/1856-28-0x0000000002D90000-0x0000000002D96000-memory.dmp

        Filesize

        24KB

      • memory/1856-29-0x0000000002E60000-0x0000000002F60000-memory.dmp

        Filesize

        1024KB

      • memory/1856-30-0x0000000002E60000-0x0000000002F60000-memory.dmp

        Filesize

        1024KB

      • memory/1856-31-0x0000000002E60000-0x0000000002F60000-memory.dmp

        Filesize

        1024KB

      • memory/1856-32-0x0000000002E60000-0x0000000002F60000-memory.dmp

        Filesize

        1024KB

      • memory/1856-33-0x0000000002E60000-0x0000000002F60000-memory.dmp

        Filesize

        1024KB

      • memory/1856-34-0x0000000002E60000-0x0000000002F60000-memory.dmp

        Filesize

        1024KB

      • memory/1856-35-0x0000000002E60000-0x0000000002F60000-memory.dmp

        Filesize

        1024KB

      • memory/1856-36-0x0000000002E60000-0x0000000002F60000-memory.dmp

        Filesize

        1024KB

      • memory/1856-37-0x0000000002E60000-0x0000000002F60000-memory.dmp

        Filesize

        1024KB

      • memory/1856-38-0x0000000002E60000-0x0000000002F60000-memory.dmp

        Filesize

        1024KB

      • memory/1856-39-0x0000000002E60000-0x0000000002F60000-memory.dmp

        Filesize

        1024KB

      • memory/1856-46-0x0000000002E60000-0x0000000002E61000-memory.dmp

        Filesize

        4KB

      • memory/1856-45-0x0000000000400000-0x0000000000536000-memory.dmp

        Filesize

        1.2MB

      • memory/1856-44-0x0000000002E60000-0x0000000002E61000-memory.dmp

        Filesize

        4KB

      • memory/1856-48-0x0000000002E60000-0x0000000002E61000-memory.dmp

        Filesize

        4KB

      • memory/1856-47-0x0000000000860000-0x00000000008B0000-memory.dmp

        Filesize

        320KB

      • memory/1856-42-0x0000000002E60000-0x0000000002F60000-memory.dmp

        Filesize

        1024KB

      • memory/4248-49-0x0000000002060000-0x00000000020B0000-memory.dmp

        Filesize

        320KB

      • memory/4248-50-0x0000000002C70000-0x0000000002C71000-memory.dmp

        Filesize

        4KB

      • memory/4248-51-0x0000000002C70000-0x0000000002C71000-memory.dmp

        Filesize

        4KB

      • memory/4248-52-0x0000000002C50000-0x0000000002C56000-memory.dmp

        Filesize

        24KB

      • memory/4248-54-0x0000000002D20000-0x0000000002E20000-memory.dmp

        Filesize

        1024KB

      • memory/4248-55-0x0000000002D20000-0x0000000002E20000-memory.dmp

        Filesize

        1024KB

      • memory/4248-56-0x0000000002D20000-0x0000000002E20000-memory.dmp

        Filesize

        1024KB

      • memory/4248-53-0x0000000002D20000-0x0000000002E20000-memory.dmp

        Filesize

        1024KB