Analysis

  • max time kernel
    149s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24-01-2024 14:07

General

  • Target

    PingCastle.exe

  • Size

    2.2MB

  • MD5

    f4a84d6f1caf0875b50135423d04139f

  • SHA1

    3a515551814775df0ccbe09f219bc972eae45a10

  • SHA256

    7c1b1e8c880a30c43b3a52ee245f963a977e1f40284f4b83f4b9afe3821753dd

  • SHA512

    314b3b995a0504bf007b0b82041e995bf18193879d614bc6ecc6c1f0dd0d2984d262577f0e5d9ba587b085f1d4716164ee93106c511bfefffabf883ddb156afb

  • SSDEEP

    24576:VmI84Q+fKBCxH3TmdVxkJygeHCpPpHrll3qhN87PQOEwxBVwk1W0JYefc9Q:YIYi3ygeHYPpHLF74OPBhdJYek+

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\PingCastle.exe
    "C:\Users\Admin\AppData\Local\Temp\PingCastle.exe"
    1⤵
      PID:5040

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/5040-0-0x00000249E8DF0000-0x00000249E9030000-memory.dmp

      Filesize

      2.2MB

    • memory/5040-1-0x00007FFCF4C50000-0x00007FFCF5711000-memory.dmp

      Filesize

      10.8MB

    • memory/5040-2-0x00000249EB5E0000-0x00000249EB5F0000-memory.dmp

      Filesize

      64KB

    • memory/5040-3-0x00007FFCF4C50000-0x00007FFCF5711000-memory.dmp

      Filesize

      10.8MB

    • memory/5040-4-0x00000249EB5E0000-0x00000249EB5F0000-memory.dmp

      Filesize

      64KB