Resubmissions

18/02/2024, 15:25 UTC

240218-stk51abf4z 10

18/02/2024, 15:19 UTC

240218-sp9ykabf2v 10

18/02/2024, 14:45 UTC

240218-r46c9abc7w 10

Analysis

  • max time kernel
    142s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    18/02/2024, 15:25 UTC

General

  • Target

    Minty/api-ms-win-crt-filesystem-l1-1-0.dll

  • Size

    13KB

  • MD5

    821da1308062d9548cc4cd276ac8a5bb

  • SHA1

    d9885c160a3fb28b5aac11970487c1947c6c0c70

  • SHA256

    0074669eeb5234606ef73dc118f580fe438eeba6ca7279e9b3d64a26c0b100ec

  • SHA512

    c437035879033815e43d412cc1aee52f8b1815b388082b304bbe4bf1bc9648ba19c98e80579de105c56528619e84bf906f3fe9f02d6028f5735054730c2e6daa

  • SSDEEP

    192:Mt/PGnWlC0i5C9WphWKdZubhLUjhdQuxaZscF8Bd1LEPa9sgfxIZH:yunWm5C9WphWsZKa+ZsHLEPDgf2h

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\Minty\api-ms-win-crt-filesystem-l1-1-0.dll,#1
    1⤵
      PID:2992

    Network

    • flag-us
      DNS
      241.150.49.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      241.150.49.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      181.178.17.96.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      181.178.17.96.in-addr.arpa
      IN PTR
      Response
      181.178.17.96.in-addr.arpa
      IN PTR
      a96-17-178-181deploystaticakamaitechnologiescom
    • flag-us
      DNS
      95.221.229.192.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      95.221.229.192.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      104.219.191.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      104.219.191.52.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      228.249.119.40.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      228.249.119.40.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      79.121.231.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      79.121.231.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      183.59.114.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      183.59.114.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      18.31.95.13.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      18.31.95.13.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      217.135.221.88.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      217.135.221.88.in-addr.arpa
      IN PTR
      Response
      217.135.221.88.in-addr.arpa
      IN PTR
      a88-221-135-217deploystaticakamaitechnologiescom
    • flag-us
      DNS
      178.178.17.96.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      178.178.17.96.in-addr.arpa
      IN PTR
      Response
      178.178.17.96.in-addr.arpa
      IN PTR
      a96-17-178-178deploystaticakamaitechnologiescom
    • flag-us
      DNS
      175.178.17.96.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      175.178.17.96.in-addr.arpa
      IN PTR
      Response
      175.178.17.96.in-addr.arpa
      IN PTR
      a96-17-178-175deploystaticakamaitechnologiescom
    • flag-us
      DNS
      8.167.79.40.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      8.167.79.40.in-addr.arpa
      IN PTR
      Response
    • 52.142.223.178:80
      104 B
      2
    • 8.8.8.8:53
      241.150.49.20.in-addr.arpa
      dns
      72 B
      158 B
      1
      1

      DNS Request

      241.150.49.20.in-addr.arpa

    • 8.8.8.8:53
      181.178.17.96.in-addr.arpa
      dns
      72 B
      137 B
      1
      1

      DNS Request

      181.178.17.96.in-addr.arpa

    • 8.8.8.8:53
      95.221.229.192.in-addr.arpa
      dns
      73 B
      144 B
      1
      1

      DNS Request

      95.221.229.192.in-addr.arpa

    • 8.8.8.8:53
      104.219.191.52.in-addr.arpa
      dns
      73 B
      147 B
      1
      1

      DNS Request

      104.219.191.52.in-addr.arpa

    • 8.8.8.8:53
      228.249.119.40.in-addr.arpa
      dns
      73 B
      159 B
      1
      1

      DNS Request

      228.249.119.40.in-addr.arpa

    • 8.8.8.8:53
      79.121.231.20.in-addr.arpa
      dns
      72 B
      158 B
      1
      1

      DNS Request

      79.121.231.20.in-addr.arpa

    • 8.8.8.8:53
      183.59.114.20.in-addr.arpa
      dns
      72 B
      158 B
      1
      1

      DNS Request

      183.59.114.20.in-addr.arpa

    • 8.8.8.8:53
      18.31.95.13.in-addr.arpa
      dns
      70 B
      144 B
      1
      1

      DNS Request

      18.31.95.13.in-addr.arpa

    • 8.8.8.8:53
      217.135.221.88.in-addr.arpa
      dns
      73 B
      139 B
      1
      1

      DNS Request

      217.135.221.88.in-addr.arpa

    • 8.8.8.8:53
      178.178.17.96.in-addr.arpa
      dns
      72 B
      137 B
      1
      1

      DNS Request

      178.178.17.96.in-addr.arpa

    • 8.8.8.8:53
      175.178.17.96.in-addr.arpa
      dns
      72 B
      137 B
      1
      1

      DNS Request

      175.178.17.96.in-addr.arpa

    • 8.8.8.8:53
      8.167.79.40.in-addr.arpa
      dns
      70 B
      144 B
      1
      1

      DNS Request

      8.167.79.40.in-addr.arpa

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.