7366cc3ea810bde456dcdff92a5c79c6761650738f4f24df8496ff8b15be9f37 | Triage

Analysis

max time kernel
118s
max time network
121s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
18-03-2024 12:38

Sharing

Report Analysis Logs

General

Target

d3882e86767e18ecfd53bdf35d18bb31.exe
Size

57KB
MD5

d3882e86767e18ecfd53bdf35d18bb31
SHA1

ec4c8fe1f8642ffd5ac0afe977439ed1a7ccd635
SHA256

7366cc3ea810bde456dcdff92a5c79c6761650738f4f24df8496ff8b15be9f37
SHA512

fe3236da18516d2bf4239b5817f0ac644472dafcd72c1fb7be262614e32ba4852f24cc9a037d8fa3e3e663ee2184236fa28225a5a36b3870d9c4d976acd3ece3
SSDEEP

1536:dhLNrunXmHQBMRoW1PfC5vKEBBS/mEY3m:dhL13SiPfCpfg/LY3m

Score

4^/10

Malware Config

Signatures

Drops file in Windows directory 3 IoCs

description	ioc	Process
File opened for modification	C:\Windows\teste.Ini	d3882e86767e18ecfd53bdf35d18bb31.exe
File created	\??\c:\windows\serverletwindows.exe	d3882e86767e18ecfd53bdf35d18bb31.exe
File created	\??\c:\windows\serverletwindowsl.exe	d3882e86767e18ecfd53bdf35d18bb31.exe

C:\Users\Admin\AppData\Local\Temp\d3882e86767e18ecfd53bdf35d18bb31.exe
"C:\Users\Admin\AppData\Local\Temp\d3882e86767e18ecfd53bdf35d18bb31.exe"
1⤵
- Drops file in Windows directory
PID:1488

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Windows\teste.Ini

Filesize
195B

MD5
984f53325c611f3518e40043170766fe

SHA1
3b233d40a70f2c0fb9d05e575c4c8986c696def3

SHA256
e19605ac07f3dd2361f3b5c572290c0abce544ec330796e660bbdf54421dbc56

SHA512
05ebafbd252beada3b904d5ec781ee5c6324f9b70a7bf5dd16af6dfc05e507ebc63d9f4d99fc2159871f86a779cade3a75690a133a8cabfc315f4a3a78f688d9

Download Submit
memory/1488-12-0x0000000000400000-0x0000000000421000-memory.dmp

Filesize
132KB

Download