Analysis

  • max time kernel
    192s
  • max time network
    210s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03-01-2024 14:54

General

  • Target

    470621f5aef9787e21b629735c1a5f9f.exe

  • Size

    1.3MB

  • MD5

    470621f5aef9787e21b629735c1a5f9f

  • SHA1

    be32079fc5d6662582685689c644322642073778

  • SHA256

    d0b801a4ea3be10c3cf2dfff06e2437c9d96e4cbe5be96483c00a4c10b27d2c5

  • SHA512

    9e321a30ae8d88c13f96033fd63a7a5bb78a35c2bb1edbe02c30109df518c07c54a72f29c3f11c9573943483ac2fb5e273d8ad2054e30458396b5de6f78c534c

  • SSDEEP

    24576:P4S/d3rKzksfks2y8jIGReCFlolhhNxuNeG5Gm+8MN6ZNBZ:TKqYGRzlWoejmcN6ZNB

Score
9/10

Malware Config

Signatures

  • CustAttr .NET packer 1 IoCs

    Detects CustAttr .NET packer in memory.

Processes

  • C:\Users\Admin\AppData\Local\Temp\470621f5aef9787e21b629735c1a5f9f.exe
    "C:\Users\Admin\AppData\Local\Temp\470621f5aef9787e21b629735c1a5f9f.exe"
    1⤵
      PID:2972

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2972-0-0x0000000000850000-0x000000000099A000-memory.dmp

      Filesize

      1.3MB

    • memory/2972-1-0x0000000074580000-0x0000000074D30000-memory.dmp

      Filesize

      7.7MB

    • memory/2972-2-0x0000000005AE0000-0x0000000006084000-memory.dmp

      Filesize

      5.6MB

    • memory/2972-3-0x0000000005380000-0x0000000005412000-memory.dmp

      Filesize

      584KB

    • memory/2972-4-0x0000000005510000-0x0000000005520000-memory.dmp

      Filesize

      64KB

    • memory/2972-5-0x0000000005540000-0x000000000554A000-memory.dmp

      Filesize

      40KB

    • memory/2972-6-0x00000000055F0000-0x000000000568C000-memory.dmp

      Filesize

      624KB

    • memory/2972-7-0x0000000002C70000-0x0000000002C82000-memory.dmp

      Filesize

      72KB

    • memory/2972-8-0x0000000074580000-0x0000000074D30000-memory.dmp

      Filesize

      7.7MB

    • memory/2972-9-0x0000000005510000-0x0000000005520000-memory.dmp

      Filesize

      64KB