Analysis

  • max time kernel
    170s
  • max time network
    180s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01-01-2024 15:27

General

  • Target

    73af283fcb06a9ea35ea6ad24b62b302459594f4b09dbba2d74001bf90ab020c.exe

  • Size

    125KB

  • MD5

    989d0f34c3f5e1688071cc058e49f6cf

  • SHA1

    d57d9bc46d6a0228cde494d843becdadbf070d7d

  • SHA256

    73af283fcb06a9ea35ea6ad24b62b302459594f4b09dbba2d74001bf90ab020c

  • SHA512

    83949f0d0cf5b22ea48d4098ca430edcdc857ef0abf2ab45e7b8feffd906a351991af100bc94ad829155375ff2426d7364084da29c63e89d7e3c10a67d44747a

  • SSDEEP

    3072:RwNZx8JGA9ZDsjHl+lIvPpKKvq9aqBJLxFfVK9Y:SgnsjF15x/CJLfM9

Score
8/10

Malware Config

Signatures

  • Disables Task Manager via registry modification

Processes

  • C:\Users\Admin\AppData\Local\Temp\73af283fcb06a9ea35ea6ad24b62b302459594f4b09dbba2d74001bf90ab020c.exe
    "C:\Users\Admin\AppData\Local\Temp\73af283fcb06a9ea35ea6ad24b62b302459594f4b09dbba2d74001bf90ab020c.exe"
    1⤵
      PID:1460

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1460-0-0x00000000748A0000-0x0000000075050000-memory.dmp
      Filesize

      7.7MB

    • memory/1460-1-0x00000000003B0000-0x00000000003D4000-memory.dmp
      Filesize

      144KB

    • memory/1460-2-0x00000000054B0000-0x0000000005A54000-memory.dmp
      Filesize

      5.6MB

    • memory/1460-3-0x0000000004DF0000-0x0000000004E82000-memory.dmp
      Filesize

      584KB

    • memory/1460-4-0x00000000748A0000-0x0000000075050000-memory.dmp
      Filesize

      7.7MB

    • memory/1460-5-0x0000000004FA0000-0x0000000004FB0000-memory.dmp
      Filesize

      64KB

    • memory/1460-6-0x0000000004DE0000-0x0000000004DEA000-memory.dmp
      Filesize

      40KB

    • memory/1460-7-0x0000000004FA0000-0x0000000004FB0000-memory.dmp
      Filesize

      64KB

    • memory/1460-8-0x0000000004FA0000-0x0000000004FB0000-memory.dmp
      Filesize

      64KB

    • memory/1460-9-0x0000000004FA0000-0x0000000004FB0000-memory.dmp
      Filesize

      64KB

    • memory/1460-10-0x0000000004FA0000-0x0000000004FB0000-memory.dmp
      Filesize

      64KB

    • memory/1460-11-0x0000000004FA0000-0x0000000004FB0000-memory.dmp
      Filesize

      64KB