Analysis

  • max time kernel
    4s
  • max time network
    141s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/01/2024, 17:38

General

  • Target

    51301d9aa0cb36132bba122ac5e6a9b0.exe

  • Size

    135KB

  • MD5

    51301d9aa0cb36132bba122ac5e6a9b0

  • SHA1

    60986408355cebfac6a33256500311a82b3f94c8

  • SHA256

    e6481f4ed773aed03bcfe01aa9e11a9363a477302cec9883534d6d3c0cf6fcdb

  • SHA512

    73bd689b7f4715a7676f4fcaa96d6e41830372ac33fda45c25f36056df16c7a713c92514a8ca40205f6761ddc6315a546b886040ad73aa91016255b6200639a7

  • SSDEEP

    1536:DIvFFSkdATQvEy2VXHxXqabeCihd2QSWzXDX39mbtQ+Aim:ySkdATQsI3hVSWzzUBFm

Score
5/10

Malware Config

Signatures

  • Drops file in System32 directory 1 IoCs
  • Suspicious behavior: LoadsDriver 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\51301d9aa0cb36132bba122ac5e6a9b0.exe
    "C:\Users\Admin\AppData\Local\Temp\51301d9aa0cb36132bba122ac5e6a9b0.exe"
    1⤵
    • Drops file in System32 directory
    PID:4908

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/4908-0-0x0000000000400000-0x0000000000430000-memory.dmp

          Filesize

          192KB

        • memory/4908-2-0x0000000000400000-0x0000000000430000-memory.dmp

          Filesize

          192KB

        • memory/4908-3-0x0000000000400000-0x0000000000430000-memory.dmp

          Filesize

          192KB

        • memory/4908-4-0x0000000000400000-0x0000000000430000-memory.dmp

          Filesize

          192KB

        • memory/4908-5-0x0000000000400000-0x0000000000430000-memory.dmp

          Filesize

          192KB

        • memory/4908-6-0x0000000000400000-0x0000000000430000-memory.dmp

          Filesize

          192KB

        • memory/4908-7-0x0000000000400000-0x0000000000430000-memory.dmp

          Filesize

          192KB

        • memory/4908-8-0x0000000000400000-0x0000000000430000-memory.dmp

          Filesize

          192KB

        • memory/4908-9-0x0000000000400000-0x0000000000430000-memory.dmp

          Filesize

          192KB

        • memory/4908-10-0x0000000000400000-0x0000000000430000-memory.dmp

          Filesize

          192KB

        • memory/4908-11-0x0000000000400000-0x0000000000430000-memory.dmp

          Filesize

          192KB

        • memory/4908-12-0x0000000000400000-0x0000000000430000-memory.dmp

          Filesize

          192KB

        • memory/4908-13-0x0000000000400000-0x0000000000430000-memory.dmp

          Filesize

          192KB

        • memory/4908-14-0x0000000000400000-0x0000000000430000-memory.dmp

          Filesize

          192KB

        • memory/4908-15-0x0000000000400000-0x0000000000430000-memory.dmp

          Filesize

          192KB

        • memory/4908-16-0x0000000000400000-0x0000000000430000-memory.dmp

          Filesize

          192KB