Overview

overview

10

Static

static

3

100.exe

windows7-x64

6

100.exe

windows10-2004-x64

6

40.exe

windows7-x64

10

40.exe

windows10-2004-x64

10

rdns.exe

windows7-x64

1

rdns.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    147s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240319-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240319-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/04/2024, 22:27

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    rdns.exe
  • Size 80KB
  • Sample240406-2c418acg7x
  • SHA256 77e295dc521ad53cf422f892685ce70655b4c9ea7086bcfc12cbf872f4b3e8a1
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\rdns.exe
    "C:\Users\Admin\AppData\Local\Temp\rdns.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4696
    • C:\Users\Admin\AppData\Local\Temp\rdns.exe
      C:\Users\Admin\AppData\Local\Temp\rdns.exe -bkg
      2⤵
        PID:3580
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=5128 --field-trial-handle=2260,i,3739451884007376837,4900555371550671478,262144 --variations-seed-version /prefetch:8
      1⤵
        PID:4688

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            setup.exe
            • Path C:\Users\Admin\AppData\Local\Temp\stb7501.tmp\setup.exe
            • Size 763B
            • SHA256 67d646e88c29a7f9182ba5937c66590005204484d4c41c36a99d5b38ec1a4543
            • MD5 SHA1 SHA512
            Submit Download