e6182546551365014b3fb11ce35063d7e308b4693fc115b17311d49341c9b304

Analysis

max time kernel
143s
max time network
160s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
28/02/2024, 01:57

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

e6182546551365014b3fb11ce35063d7e308b4693fc115b17311d49341c9b304.exe
Size

144.0MB
MD5

909b4b4e4b58b7b34a9df4647a0bb5e4
SHA1

2570a62f878b2d88c3ad79bf429c3f71626c128e
SHA256

e6182546551365014b3fb11ce35063d7e308b4693fc115b17311d49341c9b304
SHA512

f346a1a528c56472182f325f556beadc9003bcc4a5c7f69c579e486b95e736a9313ab1b20a3629e16be3b7a1576d77d3d412fbe31da86c7db0796f81b65c77e4
SSDEEP

1572864:MXEnbXSzmSdE+QXaG9WBZN0f/f5B9uzvAK9ZhN6+Z:MX8XSddpZS/fVDKNxZ

Score

6^/10

Malware Config

Signatures

Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs

Web Service

T1102

flow	ioc
19	discord.com
20	discord.com

C:\Users\Admin\AppData\Local\Temp\e6182546551365014b3fb11ce35063d7e308b4693fc115b17311d49341c9b304.exe
"C:\Users\Admin\AppData\Local\Temp\e6182546551365014b3fb11ce35063d7e308b4693fc115b17311d49341c9b304.exe"
1⤵
PID:3244

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3244-3-0x000000000BFA1000-0x000000000BFA3000-memory.dmp

Filesize
8KB

Download
memory/3244-4-0x0000000012161000-0x0000000012165000-memory.dmp

Filesize
16KB

Download