Overview

overview

10

Static

static

10

Minty/Minty.exe

windows10-2004-x64

10

Minty/api-...-0.dll

windows10-2004-x64

1

Minty/api-...-0.dll

windows10-2004-x64

1

Minty/api-...-0.dll

windows10-2004-x64

1

Minty/api-...-0.dll

windows10-2004-x64

1

Minty/api-...-0.dll

windows10-2004-x64

1

Minty/api-...-0.dll

windows10-2004-x64

1

Minty/api-...-0.dll

windows10-2004-x64

1

Minty/api-...-0.dll

windows10-2004-x64

1

Minty/api-...-0.dll

windows10-2004-x64

1

Minty/api-...-0.dll

windows10-2004-x64

1

Minty/api-...-0.dll

windows10-2004-x64

1

Minty/api-...-0.dll

windows10-2004-x64

1

Minty/concrt140.dll

windows10-2004-x64

1

Minty/dbgeng.dll

windows10-2004-x64

1

Minty/dbghelp.dll

windows10-2004-x64

1

Minty/dll/...-0.dll

windows10-2004-x64

1

Minty/dll/...-0.dll

windows10-2004-x64

1

Minty/dll/...-0.dll

windows10-2004-x64

1

Minty/dll/...-0.dll

windows10-2004-x64

1

Minty/dll/...-0.dll

windows10-2004-x64

1

Minty/dll/...-0.dll

windows10-2004-x64

1

Minty/dll/...40.dll

windows10-2004-x64

1

Minty/dll/...40.dll

windows10-2004-x64

1

Minty/dll/..._1.dll

windows10-2004-x64

1

Minty/dll/...dk.dll

windows10-2004-x64

1

Minty/msvcp140.dll

windows10-2004-x64

1

Minty/msvcp140_1.dll

windows10-2004-x64

1

Minty/msvcp140_2.dll

windows10-2004-x64

1

Minty/msvc...it.dll

windows10-2004-x64

1

Minty/msvc...ds.dll

windows10-2004-x64

1

Resubmissions

18/02/2024, 15:25 UTC

240218-stk51abf4z 10

18/02/2024, 15:19 UTC

240218-sp9ykabf2v 10

18/02/2024, 14:45 UTC

240218-r46c9abc7w 10

Analysis

  • max time kernel
    141s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    18/02/2024, 15:25 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Minty/dbgeng.dll

  • Size

    4.1MB

  • MD5

    53a932b4f7819a9e62be4e84a2e808cd

  • SHA1

    031766199999581c94ce46188777d3fbda9e31d7

  • SHA256

    38c6aa8b85f388b814e2239a6a7355a999130a3cf1893a3219371f694d9759d3

  • SHA512

    3137dae30b94b0c314c9e45b1e2ccb8c7293724a6a3b69f1c9dc0aad94ec7bbca6684eaeccc04866bad55eea1ba011a687cfa107f3af7c87f7ebefa8ed1822fc

  • SSDEEP

    24576:+3rg4E36jDEdCWvKHWfkxKpafVk+kO5jjm8ipQPVQWYBqtacOOHzojxACwx+DVNv:+326jAYmNwfAEipysxAC5yod/k5le

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\Minty\dbgeng.dll,#1
    1⤵
      PID:1156

    Network

    • flag-us
      DNS
      241.150.49.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      241.150.49.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      210.178.17.96.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      210.178.17.96.in-addr.arpa
      IN PTR
      Response
      210.178.17.96.in-addr.arpa
      IN PTR
      a96-17-178-210deploystaticakamaitechnologiescom
    • flag-us
      DNS
      140.32.126.40.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      140.32.126.40.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      95.221.229.192.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      95.221.229.192.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      103.169.127.40.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      103.169.127.40.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      18.31.95.13.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      18.31.95.13.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      217.135.221.88.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      217.135.221.88.in-addr.arpa
      IN PTR
      Response
      217.135.221.88.in-addr.arpa
      IN PTR
      a88-221-135-217deploystaticakamaitechnologiescom
    • flag-us
      DNS
      178.178.17.96.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      178.178.17.96.in-addr.arpa
      IN PTR
      Response
      178.178.17.96.in-addr.arpa
      IN PTR
      a96-17-178-178deploystaticakamaitechnologiescom
    • flag-us
      DNS
      14.227.111.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      14.227.111.52.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      193.178.17.96.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      193.178.17.96.in-addr.arpa
      IN PTR
      Response
      193.178.17.96.in-addr.arpa
      IN PTR
      a96-17-178-193deploystaticakamaitechnologiescom
    • flag-us
      DNS
      91.65.42.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      91.65.42.20.in-addr.arpa
      IN PTR
      Response
    • 52.142.223.178:80
      104 B
       2
    • 8.8.8.8:53
      241.150.49.20.in-addr.arpa
      dns
      72 B
       158 B
       1
      1

      DNS Request

      241.150.49.20.in-addr.arpa

    • 8.8.8.8:53
      210.178.17.96.in-addr.arpa
      dns
      72 B
       137 B
       1
      1

      DNS Request

      210.178.17.96.in-addr.arpa

    • 8.8.8.8:53
      140.32.126.40.in-addr.arpa
      dns
      72 B
       158 B
       1
      1

      DNS Request

      140.32.126.40.in-addr.arpa

    • 8.8.8.8:53
      95.221.229.192.in-addr.arpa
      dns
      73 B
       144 B
       1
      1

      DNS Request

      95.221.229.192.in-addr.arpa

    • 8.8.8.8:53
      103.169.127.40.in-addr.arpa
      dns
      73 B
       147 B
       1
      1

      DNS Request

      103.169.127.40.in-addr.arpa

    • 8.8.8.8:53
      18.31.95.13.in-addr.arpa
      dns
      70 B
       144 B
       1
      1

      DNS Request

      18.31.95.13.in-addr.arpa

    • 8.8.8.8:53
      217.135.221.88.in-addr.arpa
      dns
      73 B
       139 B
       1
      1

      DNS Request

      217.135.221.88.in-addr.arpa

    • 8.8.8.8:53
      178.178.17.96.in-addr.arpa
      dns
      72 B
       137 B
       1
      1

      DNS Request

      178.178.17.96.in-addr.arpa

    • 8.8.8.8:53
      14.227.111.52.in-addr.arpa
      dns
      72 B
       158 B
       1
      1

      DNS Request

      14.227.111.52.in-addr.arpa

    • 8.8.8.8:53
      193.178.17.96.in-addr.arpa
      dns
      72 B
       137 B
       1
      1

      DNS Request

      193.178.17.96.in-addr.arpa

    • 8.8.8.8:53
      91.65.42.20.in-addr.arpa
      dns
      70 B
       156 B
       1
      1

      DNS Request

      91.65.42.20.in-addr.arpa

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.