Analysis

  • max time kernel
    0s
  • max time network
    101s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/01/2024, 10:21

General

  • Target

    abb84f7bbcc5585765153cd445c8c07d.exe

  • Size

    1.1MB

  • MD5

    abb84f7bbcc5585765153cd445c8c07d

  • SHA1

    69707e556ebd88aec6414c0c5a481b235ad2eead

  • SHA256

    149e9d049c83abff4843e0fab7f6cde552aef61e32a53d61e76f6c5adc3db25f

  • SHA512

    12752cdde51c29b3fb4afc16405881681f06e3f4abc8b4912c35f366af6d2bc84ae321110a6ee11f1b8d0ab557975c9892ca0977b149c59f24735c0076d33a38

  • SSDEEP

    12288:TGPoV34JStlA/afwCtrduIyCuUy21lbyOuJOmBws5o8pewY3:T0uqipuIySjQes5oSel

Score
3/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\abb84f7bbcc5585765153cd445c8c07d.exe
    "C:\Users\Admin\AppData\Local\Temp\abb84f7bbcc5585765153cd445c8c07d.exe"
    1⤵
      PID:452
      • C:\Users\Admin\AppData\Local\Temp\SecurityHealthService.exe
        "C:\Users\Admin\AppData\Local\Temp\SecurityHealthService.exe"
        2⤵
          PID:4768
          • C:\Windows\SYSTEM32\schtasks.exe
            "schtasks.exe" /create /f /tn "SMTP Subsystem Task" /xml "C:\Users\Admin\AppData\Local\Temp\tmp4D08.tmp"
            3⤵
            • Creates scheduled task(s)
            PID:912
          • C:\Windows\SYSTEM32\schtasks.exe
            "schtasks.exe" /create /f /tn "SMTP Subsystem" /xml "C:\Users\Admin\AppData\Local\Temp\tmp4CD8.tmp"
            3⤵
            • Creates scheduled task(s)
            PID:228
        • C:\Users\Admin\AppData\Local\Temp\Tayz Woofer.exe
          "C:\Users\Admin\AppData\Local\Temp\Tayz Woofer.exe"
          2⤵
            PID:4168

        Network

              MITRE ATT&CK Enterprise v15

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              • memory/4168-10-0x00007FF64B5A0000-0x00007FF64B643000-memory.dmp

                Filesize

                652KB

              • memory/4768-18-0x000000001C3D0000-0x000000001C89E000-memory.dmp

                Filesize

                4.8MB

              • memory/4768-20-0x00007FFF110E0000-0x00007FFF11A81000-memory.dmp

                Filesize

                9.6MB

              • memory/4768-22-0x0000000001980000-0x0000000001990000-memory.dmp

                Filesize

                64KB

              • memory/4768-23-0x000000001BEE0000-0x000000001BEE8000-memory.dmp

                Filesize

                32KB

              • memory/4768-21-0x000000001CA50000-0x000000001CAF6000-memory.dmp

                Filesize

                664KB

              • memory/4768-19-0x000000001BE30000-0x000000001BECC000-memory.dmp

                Filesize

                624KB

              • memory/4768-24-0x0000000001980000-0x0000000001990000-memory.dmp

                Filesize

                64KB

              • memory/4768-17-0x00007FFF110E0000-0x00007FFF11A81000-memory.dmp

                Filesize

                9.6MB

              • memory/4768-33-0x000000001D550000-0x000000001D55A000-memory.dmp

                Filesize

                40KB

              • memory/4768-38-0x000000001D770000-0x000000001D77C000-memory.dmp

                Filesize

                48KB

              • memory/4768-43-0x000000001D8B0000-0x000000001D8CE000-memory.dmp

                Filesize

                120KB

              • memory/4768-45-0x000000001D900000-0x000000001D92E000-memory.dmp

                Filesize

                184KB

              • memory/4768-47-0x000000001CFD0000-0x000000001D0D0000-memory.dmp

                Filesize

                1024KB

              • memory/4768-46-0x000000001D930000-0x000000001D944000-memory.dmp

                Filesize

                80KB

              • memory/4768-49-0x000000001CFD0000-0x000000001D0D0000-memory.dmp

                Filesize

                1024KB

              • memory/4768-48-0x000000001CFD0000-0x000000001D0D0000-memory.dmp

                Filesize

                1024KB

              • memory/4768-44-0x000000001CB10000-0x000000001CB1A000-memory.dmp

                Filesize

                40KB

              • memory/4768-42-0x000000001CCA0000-0x000000001CCAE000-memory.dmp

                Filesize

                56KB

              • memory/4768-41-0x000000001CB90000-0x000000001CBA4000-memory.dmp

                Filesize

                80KB

              • memory/4768-40-0x000000001CB70000-0x000000001CB80000-memory.dmp

                Filesize

                64KB

              • memory/4768-39-0x000000001D8A0000-0x000000001D8B4000-memory.dmp

                Filesize

                80KB

              • memory/4768-37-0x000000001D760000-0x000000001D76E000-memory.dmp

                Filesize

                56KB

              • memory/4768-36-0x000000001D4D0000-0x000000001D4DE000-memory.dmp

                Filesize

                56KB

              • memory/4768-35-0x000000001D880000-0x000000001D89A000-memory.dmp

                Filesize

                104KB

              • memory/4768-34-0x000000001CBA0000-0x000000001CBB2000-memory.dmp

                Filesize

                72KB

              • memory/4768-32-0x000000001CFD0000-0x000000001D0D0000-memory.dmp

                Filesize

                1024KB

              • memory/4768-51-0x000000001E540000-0x000000001E5A2000-memory.dmp

                Filesize

                392KB

              • memory/4768-53-0x00007FFF110E0000-0x00007FFF11A81000-memory.dmp

                Filesize

                9.6MB

              • memory/4768-54-0x00007FFF110E0000-0x00007FFF11A81000-memory.dmp

                Filesize

                9.6MB

              • memory/4768-55-0x0000000001980000-0x0000000001990000-memory.dmp

                Filesize

                64KB

              • memory/4768-56-0x000000001CFD0000-0x000000001D0D0000-memory.dmp

                Filesize

                1024KB

              • memory/4768-57-0x000000001CFD0000-0x000000001D0D0000-memory.dmp

                Filesize

                1024KB

              • memory/4768-59-0x000000001CFD0000-0x000000001D0D0000-memory.dmp

                Filesize

                1024KB

              • memory/4768-58-0x000000001CFD0000-0x000000001D0D0000-memory.dmp

                Filesize

                1024KB