Analysis

  • max time kernel
    147s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14-03-2024 20:45

General

  • Target

    c9943f32e3b532d3f796fa65c80825bb.exe

  • Size

    6.3MB

  • MD5

    c9943f32e3b532d3f796fa65c80825bb

  • SHA1

    37eab049c541c9b20b58a6d32c137d13bf25562b

  • SHA256

    b2fc17ab6142637d4ce13800cc73612c7f3f8b7069c886cb92f29a378c055504

  • SHA512

    685462632fd2a438c9d89a48af6767cbadd04d32634938c2c9e990e725ad6d5662d68c40014918918cbb13e90588582ab874792953c9d280903596d6d099d97c

  • SSDEEP

    98304:3ubtKJRu+IF/7M8eYcsOiiEO05KkN95iPMJmvPkFN2DZokfgd8o6li8:3ubwJRu+eeYTiEO05K89yMJO

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Drops file in System32 directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c9943f32e3b532d3f796fa65c80825bb.exe
    "C:\Users\Admin\AppData\Local\Temp\c9943f32e3b532d3f796fa65c80825bb.exe"
    1⤵
    • Drops file in System32 directory
    PID:3656

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3656-1-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/3656-2-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/3656-3-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/3656-4-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/3656-5-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/3656-6-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/3656-7-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/3656-8-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/3656-9-0x0000000001420000-0x0000000001421000-memory.dmp

    Filesize

    4KB

  • memory/3656-10-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/3656-12-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/3656-14-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/3656-15-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/3656-16-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/3656-17-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/3656-18-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/3656-19-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/3656-20-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/3656-21-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/3656-22-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/3656-23-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/3656-24-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/3656-25-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/3656-26-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB

  • memory/3656-27-0x0000000000400000-0x00000000012A0000-memory.dmp

    Filesize

    14.6MB