Analysis

  • max time kernel
    0s
  • max time network
    112s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01-01-2024 15:12

General

  • Target

    57de0d2d5945db11d6c845459419a1b48a5cf415a7a0866c40b03afaec6fb4fe.exe

  • Size

    108KB

  • MD5

    04bd0a129ac331d598a08c88f3b99089

  • SHA1

    e2b18d04541e93c7e2c871849061dcea5a77dc95

  • SHA256

    57de0d2d5945db11d6c845459419a1b48a5cf415a7a0866c40b03afaec6fb4fe

  • SHA512

    82495d4d2d1319d52e66308bfbbd812334e1cf1cd5b4f84763380556fdeb7790a25f38839c6eb2189f55eedcb48ba08fa74baec25d7b74fd1403660c75f33aa1

  • SSDEEP

    3072:IFLXTOKX8HIBxac8SKfbzxcwg7es6/Vsb8VKTuv:IOfoBdUhcX7elbKTu

Score
7/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\57de0d2d5945db11d6c845459419a1b48a5cf415a7a0866c40b03afaec6fb4fe.exe
    "C:\Users\Admin\AppData\Local\Temp\57de0d2d5945db11d6c845459419a1b48a5cf415a7a0866c40b03afaec6fb4fe.exe"
    1⤵
      PID:2200
      • C:\Windows\SysWOW64\NOTEPAD.EXE
        "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Desktop\RIP YO DOCUMENTS.txt
        2⤵
          PID:3468

      Network

      MITRE ATT&CK Matrix ATT&CK v13

      Credential Access

      Unsecured Credentials

      1
      T1552

      Credentials In Files

      1
      T1552.001

      Collection

      Data from Local System

      1
      T1005

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/2200-0-0x0000000000B70000-0x0000000000B92000-memory.dmp
        Filesize

        136KB

      • memory/2200-1-0x0000000074A20000-0x00000000751D0000-memory.dmp
        Filesize

        7.7MB

      • memory/2200-2-0x0000000005A60000-0x0000000006004000-memory.dmp
        Filesize

        5.6MB

      • memory/2200-577-0x0000000074A20000-0x00000000751D0000-memory.dmp
        Filesize

        7.7MB

      • memory/2200-575-0x0000000006010000-0x00000000060A2000-memory.dmp
        Filesize

        584KB