Overview

overview

1

Static

static

1

savegames (3).zip

windows7-x64

1

savegames (3).zip

windows10-2004-x64

1

1-1-LT1.zip

windows7-x64

1

1-1-LT1.zip

windows10-2004-x64

1

1-2-LT1.zip

windows7-x64

1

1-2-LT1.zip

windows10-2004-x64

1

1-3-LT1.zip

windows7-x64

1

1-3-LT1.zip

windows10-2004-x64

1

1-4-LT1.zip

windows7-x64

1

1-4-LT1.zip

windows10-2004-x64

1

1-5-LT1.zip

windows7-x64

1

1-5-LT1.zip

windows10-2004-x64

1

1-6-LT1.zip

windows7-x64

1

1-6-LT1.zip

windows10-2004-x64

1

2-1-LT1.zip

windows7-x64

1

2-1-LT1.zip

windows10-2004-x64

1

2-2-LT1.zip

windows7-x64

1

2-2-LT1.zip

windows10-2004-x64

1

2-3-LT1.zip

windows7-x64

1

2-3-LT1.zip

windows10-2004-x64

1

2-4-LT1.zip

windows7-x64

1

2-4-LT1.zip

windows10-2004-x64

1

2-5-LT1.zip

windows7-x64

1

2-5-LT1.zip

windows10-2004-x64

1

2-6-LT1.zip

windows7-x64

1

2-6-LT1.zip

windows10-2004-x64

1

3-1-LT1.zip

windows7-x64

1

3-1-LT1.zip

windows10-2004-x64

1

3-2-LT1.zip

windows7-x64

1

3-2-LT1.zip

windows10-2004-x64

1

3-3-LT1.zip

windows7-x64

1

3-3-LT1.zip

windows10-2004-x64

1

Resubmissions

23/02/2024, 22:51 UTC

240223-2s6vraah49 1

23/02/2024, 22:50 UTC

240223-2r8b7aah35 1

Analysis

  • max time kernel
    300s
  • max time network
    310s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240221-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23/02/2024, 22:51 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1-6-LT1.zip

  • Size

    356KB

  • MD5

    8d9f76f5784e167533ac9a58662aa97e

  • SHA1

    22025374a1ba90b9d72afde2e81d5fc889123761

  • SHA256

    44629c830e196e351c4a420d00cd70a759f34620c67ed660cdbc09f37e9a612c

  • SHA512

    0d0824e9b83e7ad6b6cef420492168c6981f262e8d5c4c0c44f0c34d88440baefbe2312febe1fac211396a36579f94ab68c25fdbf703bf54699b5230670c1bcd

  • SSDEEP

    6144:2VSwWNQUc8ZCUmZofO5RXfy5y4EcD9XFtg8G0c7QYMdXssewmYFooC8ta5:3NIrmfO5RvTWD3m0MOdXssLjlvM

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\Explorer.exe
    C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\1-6-LT1.zip
    1⤵
      PID:5052

    Network

    • flag-us
      DNS
      173.178.17.96.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      173.178.17.96.in-addr.arpa
      IN PTR
      Response
      173.178.17.96.in-addr.arpa
      IN PTR
      a96-17-178-173deploystaticakamaitechnologiescom
    • flag-us
      DNS
      73.31.126.40.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      73.31.126.40.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      241.154.82.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      241.154.82.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      26.35.223.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      26.35.223.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      195.233.44.23.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      195.233.44.23.in-addr.arpa
      IN PTR
      Response
      195.233.44.23.in-addr.arpa
      IN PTR
      a23-44-233-195deploystaticakamaitechnologiescom
    • flag-us
      DNS
      50.23.12.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      50.23.12.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      171.39.242.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      171.39.242.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      114.134.221.88.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      114.134.221.88.in-addr.arpa
      IN PTR
      Response
      114.134.221.88.in-addr.arpa
      IN PTR
      a88-221-134-114deploystaticakamaitechnologiescom
    • flag-us
      DNS
      194.178.17.96.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      194.178.17.96.in-addr.arpa
      IN PTR
      Response
      194.178.17.96.in-addr.arpa
      IN PTR
      a96-17-178-194deploystaticakamaitechnologiescom
    • flag-us
      DNS
      14.227.111.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      14.227.111.52.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      180.178.17.96.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      180.178.17.96.in-addr.arpa
      IN PTR
      Response
      180.178.17.96.in-addr.arpa
      IN PTR
      a96-17-178-180deploystaticakamaitechnologiescom
    No results found
    • 8.8.8.8:53
      173.178.17.96.in-addr.arpa
      dns
      72 B
       137 B
       1
      1

      DNS Request

      173.178.17.96.in-addr.arpa

    • 8.8.8.8:53
      73.31.126.40.in-addr.arpa
      dns
      71 B
       157 B
       1
      1

      DNS Request

      73.31.126.40.in-addr.arpa

    • 8.8.8.8:53
      241.154.82.20.in-addr.arpa
      dns
      72 B
       158 B
       1
      1

      DNS Request

      241.154.82.20.in-addr.arpa

    • 8.8.8.8:53
      26.35.223.20.in-addr.arpa
      dns
      71 B
       157 B
       1
      1

      DNS Request

      26.35.223.20.in-addr.arpa

    • 8.8.8.8:53
      195.233.44.23.in-addr.arpa
      dns
      72 B
       137 B
       1
      1

      DNS Request

      195.233.44.23.in-addr.arpa

    • 8.8.8.8:53
      50.23.12.20.in-addr.arpa
      dns
      70 B
       156 B
       1
      1

      DNS Request

      50.23.12.20.in-addr.arpa

    • 8.8.8.8:53
      171.39.242.20.in-addr.arpa
      dns
      72 B
       158 B
       1
      1

      DNS Request

      171.39.242.20.in-addr.arpa

    • 8.8.8.8:53
      114.134.221.88.in-addr.arpa
      dns
      73 B
       139 B
       1
      1

      DNS Request

      114.134.221.88.in-addr.arpa

    • 8.8.8.8:53
      194.178.17.96.in-addr.arpa
      dns
      72 B
       137 B
       1
      1

      DNS Request

      194.178.17.96.in-addr.arpa

    • 8.8.8.8:53
      14.227.111.52.in-addr.arpa
      dns
      72 B
       158 B
       1
      1

      DNS Request

      14.227.111.52.in-addr.arpa

    • 8.8.8.8:53
      180.178.17.96.in-addr.arpa
      dns
      72 B
       137 B
       1
      1

      DNS Request

      180.178.17.96.in-addr.arpa

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.