Analysis
-
max time kernel
1794s -
max time network
1800s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
28/02/2024, 21:47
General
-
Target
ursad.exe
-
Size
14.6MB
-
MD5
98a137550ea0d2fd65e6b45a6314b04e
-
SHA1
3d3e3a8fa6c3d1ccd98b51271b73a358b1f01920
-
SHA256
b685a2cff86cb6b2d14f66f9322433b10efdc49732db11b8bffc4a8155f7a9da
-
SHA512
e426dd2d0fb47a35ccf903f955e5dadb9e27495ed473963f925b7c60da8ca47a25ef56e3465851c5c6710f82622b967fb7bb618021f4922568321d9af826e853
-
SSDEEP
98304:6XnSohUY6XXI2+KatM9G/eFBYxUp1irAMOD8jO+C4yCgef70eL7RnKqI+VG/lDtn:63SoyOr9tM0m7Y8cyYIe5nKqI+VG/Q0
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 29 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ursad.exe"C:\Users\Admin\AppData\Local\Temp\ursad.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
-
C:\Windows\system32\wbem\WmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exe1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
412KB
MD592794d1632e4af66666de1d4a2598fb0
SHA1bcf29e4c4c86bd9bdf452d9c9f5cff1296eddb07
SHA2564fa80c6a78c851e58355ba41b7737ae7620c07100632cef6766bc8b1ff154d01
SHA5125b8b810f4a3b76f355d924afc4a5fb45c7c39a49fa2ff5e4788229540699ae58bc313311ef9aba08decc52d4b2d36240673bdd114863d317d0634712f7718764
-
Filesize
1024KB
MD5cdda2e6a603336fb5b893b928872fb23
SHA138bc375d130bd6a6b4f76960163be963f2160d43
SHA256e82d1716af08fb33c928cb5f797185dd866c8d4d77847e9ad95bffe2e6dca4fb
SHA5123e350f663bcd2509eb45b4a64cde8eaa481b63743f7ce5fdfb4e589099169d2efba8164902bb194b1340fa73bb6ad83b64f47f916313fbb658bfb954c4448e37
-
Filesize
16B
MD5206702161f94c5cd39fadd03f4014d98
SHA1bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA2561005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
SHA5120af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
-
Filesize
16B
MD546295cac801e5d4857d09837238a6394
SHA144e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA2560f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA5128969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
-
Filesize
41B
MD55af87dfd673ba2115e2fcf5cfdb727ab
SHA1d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
-
Filesize
656KB
MD52b7bd07e89f2824ba1273779efdcddd7
SHA1fd869d05230f6a3fd2981003e8278ea57523f07b
SHA2562bc09efb2723d1a4f85e70e129fb4a47922c5e8ede8f58352242ba1c4e55ee0f
SHA512afbf5cab403803a59510064b8df407a2970b45db88fdafc8d9b3a8eeb44ba2544e9d0cfc780ee096254f8651c1a58d7c6456bd9e06fcab07939be6b02f5d134c
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB
-
Filesize
14.7MB