Resubmissions

29/01/2024, 16:00

240129-tf3zbsdeb6 3

29/01/2024, 15:54

240129-tb8c9aehaj 3

Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29/01/2024, 16:00

General

  • Target

    Microsoft Remote Service.exe

  • Size

    25KB

  • MD5

    a4c5c1283486f9e2dc057f16a28e38c4

  • SHA1

    6ef27ae74fd089df69ea73291dcb88fa019e020d

  • SHA256

    f78333de7a2928bc6ab6aa3b379889f0ce4ba128ef454ea7e3d694e6b6cde740

  • SHA512

    d9b40f3b9efd1cef31be3feb1be44003137bab7488429417ea083bf0e1dc612366e9cc399aec313abf800bedf4c59544f968a5cc5dc0b1573082e1a091e56b52

  • SSDEEP

    384:Lt4bIb5KDEqLGiE0+tZLzEWOCWA7z73vrhFr5m98+DB6tMCawENiVyjOlg3ahxSv:Lt4cbUDG0W/3fr3rGlbZOAF

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\Microsoft Remote Service.exe
    "C:\Users\Admin\AppData\Local\Temp\Microsoft Remote Service.exe"
    1⤵
      PID:2124

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/2124-0-0x000000013F5F0000-0x000000013F5FA000-memory.dmp

            Filesize

            40KB

          • memory/2124-1-0x000007FEF5450000-0x000007FEF5E3C000-memory.dmp

            Filesize

            9.9MB

          • memory/2124-2-0x000000001BB20000-0x000000001BBA0000-memory.dmp

            Filesize

            512KB

          • memory/2124-3-0x000007FEF5450000-0x000007FEF5E3C000-memory.dmp

            Filesize

            9.9MB