Analysis

  • max time kernel
    138s
  • max time network
    141s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/01/2024, 08:22

General

  • Target

    4dd2b289869b418df6a6a9264e2db6de.exe

  • Size

    214KB

  • MD5

    4dd2b289869b418df6a6a9264e2db6de

  • SHA1

    3a7d4de96155e134a1752f5be817a506294690c7

  • SHA256

    1118061fbfaa6cfc19d3ee14e2d4f495dcbb0d3d0c551b4a507c5193de7863e8

  • SHA512

    4259ee9806bd165da6d23294d2dc8baeced7ed2c9445ed75c13f1f7db3f241582fc3eb2b1c524b6ba835b60edd7462eb189d3f413f2e7d17b6dc3f7166be958b

  • SSDEEP

    3072:GJc2xsn/LuYDPklaq+KE4NvlTPGrHixbxIZ9HU8jYOs0xlo0TEI7T14hylpaemQ+:eODumejwHaVI08jYOssl5XpyyTFmQ+

Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4dd2b289869b418df6a6a9264e2db6de.exe
    "C:\Users\Admin\AppData\Local\Temp\4dd2b289869b418df6a6a9264e2db6de.exe"
    1⤵
    • Drops file in Windows directory
    PID:3092

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/3092-3-0x0000000001690000-0x0000000001691000-memory.dmp

          Filesize

          4KB

        • memory/3092-9-0x00000000016A0000-0x00000000016C0000-memory.dmp

          Filesize

          128KB

        • memory/3092-5-0x0000000004D10000-0x0000000004D3F000-memory.dmp

          Filesize

          188KB

        • memory/3092-4-0x00000000016A0000-0x00000000016C0000-memory.dmp

          Filesize

          128KB

        • memory/3092-2-0x0000000001680000-0x0000000001681000-memory.dmp

          Filesize

          4KB

        • memory/3092-17-0x00000000016A0000-0x00000000016C0000-memory.dmp

          Filesize

          128KB

        • memory/3092-1-0x0000000001670000-0x0000000001671000-memory.dmp

          Filesize

          4KB

        • memory/3092-0-0x0000000001660000-0x0000000001661000-memory.dmp

          Filesize

          4KB