Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05-03-2024 05:44

General

  • Target

    b3ef0ee88640a110b7834f879efc5518.exe

  • Size

    45KB

  • MD5

    b3ef0ee88640a110b7834f879efc5518

  • SHA1

    d2f4c5041087fa7e85307a7c13359b30a64a8ec5

  • SHA256

    0d1305b378d8a566b169b30fa0917f70614a3d62854272386bf5335af58ff3c3

  • SHA512

    697d7cf4c3cd168bdc0b25917ba686cd3de648abc53e5aa207726c60da3070046737292c6607b2a3248019c926e82dfdea2a554a4f0d8ae591641ecb82a0e438

  • SSDEEP

    768:NiOQauOECLIK8u4qc+5aIjK4LrP+K5fE67y7N8FdUV0MeUTW:Nip8JB5aOLL+K5E6U87gW

Score
6/10

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
  • Drops file in Windows directory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b3ef0ee88640a110b7834f879efc5518.exe
    "C:\Users\Admin\AppData\Local\Temp\b3ef0ee88640a110b7834f879efc5518.exe"
    1⤵
    • Adds Run key to start application
    • Drops file in Windows directory
    PID:4848

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4848-3-0x0000000000400000-0x0000000000412000-memory.dmp

    Filesize

    72KB

  • memory/4848-4-0x0000000000400000-0x0000000000412000-memory.dmp

    Filesize

    72KB

  • memory/4848-5-0x0000000000400000-0x0000000000412000-memory.dmp

    Filesize

    72KB

  • memory/4848-6-0x0000000000400000-0x0000000000412000-memory.dmp

    Filesize

    72KB

  • memory/4848-7-0x0000000000400000-0x0000000000412000-memory.dmp

    Filesize

    72KB

  • memory/4848-8-0x0000000000400000-0x0000000000412000-memory.dmp

    Filesize

    72KB

  • memory/4848-9-0x0000000000400000-0x0000000000412000-memory.dmp

    Filesize

    72KB

  • memory/4848-10-0x0000000000400000-0x0000000000412000-memory.dmp

    Filesize

    72KB

  • memory/4848-11-0x0000000000400000-0x0000000000412000-memory.dmp

    Filesize

    72KB

  • memory/4848-12-0x0000000000400000-0x0000000000412000-memory.dmp

    Filesize

    72KB

  • memory/4848-13-0x0000000000400000-0x0000000000412000-memory.dmp

    Filesize

    72KB

  • memory/4848-15-0x0000000000400000-0x0000000000412000-memory.dmp

    Filesize

    72KB

  • memory/4848-16-0x0000000000400000-0x0000000000412000-memory.dmp

    Filesize

    72KB