Analysis

  • max time kernel
    4s
  • max time network
    152s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 13:00

General

  • Target

    371431e956275128c99376f06dd734c0.exe

  • Size

    171KB

  • MD5

    371431e956275128c99376f06dd734c0

  • SHA1

    9e39aa6c8d9eef1c31c54f22b9bc8380492c1512

  • SHA256

    f20032be595f8364f65a52bcaafd16104884232ff214c67ba7938d6f9d6e958e

  • SHA512

    ec68ead18e067ee8a143d48cc96bf56232a7058e156807d8c315a9e8b47443b3b1ea95e31aee521ad62ab5a8b4628b0527f1767db676a272b9860b9d7c428f73

  • SSDEEP

    192:rQVNQuKBcdmkQRkOVnnIHBtkYF8lFLKJT2aqpfXZRoZinL1LBspkA+CHUwtAnoRm:Es1BcdmkBinnIhtkNz+JALSuoRO

Score
3/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\371431e956275128c99376f06dd734c0.exe
    "C:\Users\Admin\AppData\Local\Temp\371431e956275128c99376f06dd734c0.exe"
    1⤵
      PID:1256
      • C:\Windows\system32\cmd.exe
        cmd /c ""C:\Users\Admin\AppData\Local\Temp\directive.bat" "
        2⤵
          PID:2724

      Network

      MITRE ATT&CK Enterprise v15

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • C:\Users\Admin\AppData\Local\Temp\directive.bat

        Filesize

        87B

        MD5

        d98563023da3f91eef7f2028ad9aaf5f

        SHA1

        12abff523dd7c1dc53465fe548b132ecec0b81f7

        SHA256

        ef6ee5da3963cadc651fd8f5b447999db3b8f7ac79a7150f3985c648f2633ed6

        SHA512

        1dcd3cf75daa9c443f761b0d75495d6e9f535b4dff37184cd9f06bf40954098e0bd65d5a80f8b7ea7905bd407701059fd4a270b32dc6b09b909e3b934c4d2152

      • memory/1256-0-0x0000000000EF0000-0x0000000000F20000-memory.dmp

        Filesize

        192KB

      • memory/1256-1-0x000007FEF5070000-0x000007FEF5A5C000-memory.dmp

        Filesize

        9.9MB

      • memory/1256-2-0x000000001B100000-0x000000001B180000-memory.dmp

        Filesize

        512KB

      • memory/1256-12-0x000007FEF5070000-0x000007FEF5A5C000-memory.dmp

        Filesize

        9.9MB

      • memory/1256-13-0x000000001B100000-0x000000001B180000-memory.dmp

        Filesize

        512KB