Analysis

  • max time kernel
    13s
  • max time network
    16s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-it
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-itlocale:it-itos:windows10-2004-x64systemwindows
  • submitted
    09/04/2024, 13:31

General

  • Target

    cppwinrt.exe

  • Size

    1.2MB

  • MD5

    ab1eedba3788dc09c9abed6c06dc5b17

  • SHA1

    140d8be72963d968231489f5a0242363f69534f0

  • SHA256

    fb0abff0f0c127110a88c8f53ca5ffbcba437e65693249a46bd58c8d4391d80c

  • SHA512

    d8b4473a881c19755bd9533b85a2817a46afc56ab195082973334d71b33aa681cca13d6b2450d5e32cd160f8c2bb5aaa1d015cce75e45f6af518f2667e2699ae

  • SSDEEP

    24576:lpQOOT0rdd2Z1fKsOypTADYrWfK9vCUT5O0lCN/KPhweW73zSNSqvGqtRPO574b1:iA1C5O0lCOhweW73zSNq74byiu2/Q/SH

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\cppwinrt.exe
    "C:\Users\Admin\AppData\Local\Temp\cppwinrt.exe"
    1⤵
      PID:3448
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
      1⤵
        PID:4124
      • C:\Users\Admin\AppData\Local\Temp\cppwinrt.exe
        "C:\Users\Admin\AppData\Local\Temp\cppwinrt.exe"
        1⤵
          PID:4368
        • C:\Users\Admin\AppData\Local\Temp\cppwinrt.exe
          "C:\Users\Admin\AppData\Local\Temp\cppwinrt.exe"
          1⤵
            PID:2648

          Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads