Resubmissions

18/02/2024, 15:25 UTC

240218-stk51abf4z 10

18/02/2024, 15:19 UTC

240218-sp9ykabf2v 10

18/02/2024, 14:45 UTC

240218-r46c9abc7w 10

Analysis

  • max time kernel
    137s
  • max time network
    158s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    18/02/2024, 15:25 UTC

General

  • Target

    Minty/dll/api-ms-win-crt-private-l1-1-0.dll

  • Size

    63KB

  • MD5

    cb8a3abf15c3a44127c3eaa7fcb01367

  • SHA1

    e3f918285f281d104c176c62976cf6b39d540f12

  • SHA256

    ddc0289a8a719374074f6484969c223491e469dcf7e2cbb7ac29dd0c4b7e5a8c

  • SHA512

    341f915601ff8e18c47ffc6ae862e642410d729c29a958d62ea41e77f3d74cbd7504c484f2fd0d47c0d21159d800dc6b0111db65a8eae5145766899039a56a46

  • SSDEEP

    1536:MTs8iYDe5c4bFe2JyhcvxXWpD7d3334BkZn+P9oQUf3:yiYDe5c4bFe2JyhcvxXWpD7d3334BkZx

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\Minty\dll\api-ms-win-crt-private-l1-1-0.dll,#1
    1⤵
      PID:4524

    Network

    • flag-us
      DNS
      104.219.191.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      104.219.191.52.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      182.178.17.96.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      182.178.17.96.in-addr.arpa
      IN PTR
      Response
      182.178.17.96.in-addr.arpa
      IN PTR
      a96-17-178-182deploystaticakamaitechnologiescom
    • flag-us
      DNS
      0.159.190.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      0.159.190.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      95.221.229.192.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      95.221.229.192.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      209.205.72.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      209.205.72.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      58.55.71.13.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      58.55.71.13.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      103.169.127.40.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      103.169.127.40.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      198.187.3.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      198.187.3.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      217.135.221.88.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      217.135.221.88.in-addr.arpa
      IN PTR
      Response
      217.135.221.88.in-addr.arpa
      IN PTR
      a88-221-135-217deploystaticakamaitechnologiescom
    • flag-us
      DNS
      114.110.16.96.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      114.110.16.96.in-addr.arpa
      IN PTR
      Response
      114.110.16.96.in-addr.arpa
      IN PTR
      a96-16-110-114deploystaticakamaitechnologiescom
    • flag-us
      DNS
      208.178.17.96.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      208.178.17.96.in-addr.arpa
      IN PTR
      Response
      208.178.17.96.in-addr.arpa
      IN PTR
      a96-17-178-208deploystaticakamaitechnologiescom
    • flag-us
      DNS
      210.178.17.96.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      210.178.17.96.in-addr.arpa
      IN PTR
      Response
      210.178.17.96.in-addr.arpa
      IN PTR
      a96-17-178-210deploystaticakamaitechnologiescom
    • flag-us
      DNS
      105.193.132.51.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      105.193.132.51.in-addr.arpa
      IN PTR
      Response
    No results found
    • 8.8.8.8:53
      104.219.191.52.in-addr.arpa
      dns
      73 B
      147 B
      1
      1

      DNS Request

      104.219.191.52.in-addr.arpa

    • 8.8.8.8:53
      182.178.17.96.in-addr.arpa
      dns
      72 B
      137 B
      1
      1

      DNS Request

      182.178.17.96.in-addr.arpa

    • 8.8.8.8:53
      0.159.190.20.in-addr.arpa
      dns
      71 B
      157 B
      1
      1

      DNS Request

      0.159.190.20.in-addr.arpa

    • 8.8.8.8:53
      95.221.229.192.in-addr.arpa
      dns
      73 B
      144 B
      1
      1

      DNS Request

      95.221.229.192.in-addr.arpa

    • 8.8.8.8:53
      209.205.72.20.in-addr.arpa
      dns
      72 B
      158 B
      1
      1

      DNS Request

      209.205.72.20.in-addr.arpa

    • 8.8.8.8:53
      58.55.71.13.in-addr.arpa
      dns
      70 B
      144 B
      1
      1

      DNS Request

      58.55.71.13.in-addr.arpa

    • 8.8.8.8:53
      103.169.127.40.in-addr.arpa
      dns
      73 B
      147 B
      1
      1

      DNS Request

      103.169.127.40.in-addr.arpa

    • 8.8.8.8:53
      198.187.3.20.in-addr.arpa
      dns
      71 B
      157 B
      1
      1

      DNS Request

      198.187.3.20.in-addr.arpa

    • 8.8.8.8:53
      217.135.221.88.in-addr.arpa
      dns
      73 B
      139 B
      1
      1

      DNS Request

      217.135.221.88.in-addr.arpa

    • 8.8.8.8:53
      114.110.16.96.in-addr.arpa
      dns
      72 B
      137 B
      1
      1

      DNS Request

      114.110.16.96.in-addr.arpa

    • 8.8.8.8:53
      208.178.17.96.in-addr.arpa
      dns
      72 B
      137 B
      1
      1

      DNS Request

      208.178.17.96.in-addr.arpa

    • 8.8.8.8:53
      210.178.17.96.in-addr.arpa
      dns
      72 B
      137 B
      1
      1

      DNS Request

      210.178.17.96.in-addr.arpa

    • 8.8.8.8:53
      105.193.132.51.in-addr.arpa
      dns
      73 B
      159 B
      1
      1

      DNS Request

      105.193.132.51.in-addr.arpa

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.