Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10-04-2024 10:47

General

  • Target

    485246b411ef5ea9e903397a5490d106946a8323aaf79e6041bdf94763a0c028.exe

  • Size

    1.1MB

  • MD5

    8a7ed15dfd5e385b3913129c372cc026

  • SHA1

    ff172a51c13c1a3be7f2c8b1e9352492e2ee01d6

  • SHA256

    485246b411ef5ea9e903397a5490d106946a8323aaf79e6041bdf94763a0c028

  • SHA512

    9f8621babba1917e4907d563f068a39c9db64f908e9e6083a9c8520558090117fdc6159e5af38f44524bdc2eecf4d4e6b9e2bba3053e190322aee18642ffd9a4

  • SSDEEP

    24576:2QLVx+nSmMsWO1ANzhNJutjOuXLmDbbRfh3qacMWOEjzDHLPOCTYZMS98kx9:2u0nSmM9O14hNJWXqPxhSpOELLPOCTMV

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\485246b411ef5ea9e903397a5490d106946a8323aaf79e6041bdf94763a0c028.exe
    "C:\Users\Admin\AppData\Local\Temp\485246b411ef5ea9e903397a5490d106946a8323aaf79e6041bdf94763a0c028.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:1316

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\ProgramData\cht4vx64.inf

    Filesize

    2KB

    MD5

    3afce6a5ea45af00970bb4059f44909d

    SHA1

    968c6185f64f93b431aef2fac1546d79ffb76b91

    SHA256

    bdb3aaaf6d37ae55c173519cf589343498ffa7716c779aca7f79638918ac054b

    SHA512

    b0dbf003a9c6a96655a5138feef11cbfc9bd662671c2fcc636835d80096bf0ba0c9fb8bf463d5ac7fe05d41193bb3df361860aa3c61c1b1609b1bcc773f39e5d

  • C:\ProgramData\cht4vx64.inf

    Filesize

    2KB

    MD5

    a6aa9e792ab4700f7ff1c792de2afbbe

    SHA1

    901c96e63185af7a94fa9c40cee80206c79d0bbe

    SHA256

    d55cad0599dfcfeaa4bb8729978488294a4e12c7d446981b47a9658af9ec49df

    SHA512

    51e4e845cefb2ac58fc757494f59a250dbe3560253ed70171a36282e037815a994d971827d97c5e60286803b0e96e57b492a2d2185c29945ddfb9970c647abfd

  • C:\ProgramData\cht4vx64.inf

    Filesize

    2KB

    MD5

    8982fd83338d432826fe12fd3e14bdb6

    SHA1

    7563a39dfe9ebc62fc062c111a7912dcdf1ae312

    SHA256

    1238cb3d17b147a7db9aab63b8119809285d7c93c5b53934f1d79998b4b574a6

    SHA512

    81814c7a5615f8a27a432762183f57b8e26ec7b972a916ff8290e77cb6d20199aeb7c5d9332a4e6e3a7a806450ca0bd6cc9e6c69ed64303dab8cb589378562f6

  • C:\ProgramData\cht4vx64.inf

    Filesize

    1KB

    MD5

    36de457e50e143c3f8643af53902682f

    SHA1

    113d0310d96321bec376e89c86f9cb86da6662c0

    SHA256

    3d92f0613a23f3528117751867e872c2ba4f7a5eba76ffe3cea09293331b3055

    SHA512

    208ae15b4514583906fd9fd4e9073ba115f5959e260e027e5e90dfd209d045fd036d4b5149a1e1fc6b970bfd0926eb82a10c932f0f325017d4ffbeaed2016eee

  • C:\ProgramData\diu5wy75.jog

    Filesize

    33B

    MD5

    10c412086060e778357819b71e5edb3a

    SHA1

    8150f46651221e56d26da510077e8e6f0e695eef

    SHA256

    64da69fccebc98a279b36b13586d92284163ac138e26af77343bf7f2b74acf24

    SHA512

    4e34533660230f4aed690f836a0f6d759ad79e7e528bd0b5a83b9657064728064489c0812632fc2a0907528b0237b8dc5c11017bb73a6e51ac3f8c8fbba3201a

  • C:\ProgramData\diu5wy75.jog

    Filesize

    33B

    MD5

    80e87901baed258217dfc1f9c18b0618

    SHA1

    e372c1c7ed40cef848644dadc25bd6844a3105a8

    SHA256

    13c439dbdc2c8142e45b075e4f163d43277c2f64cdc70825620414190af60304

    SHA512

    71c6c0d9a7054d73bc096c8c4de4e9a5df711f7f8f6481d2603869297de2137cf2943f0762d82eeb51242038da67aa2645c875fc50e32938fe770a644cbed5a2

  • C:\ProgramData\diu5wy75.jog

    Filesize

    33B

    MD5

    bce83f16fb8f47f5e10987a8b94eda3d

    SHA1

    da57adbb6258420277f18cadd72142df1c9d86c8

    SHA256

    40c78656d01fa1140099f4366ad4789fe63572c5b07ca755f2556a90d8baf7c0

    SHA512

    1bfd48ad24f597fc4889569c20aafa9fd0770d0f3be2678b5e07d3934dc500d2fff58e037079f823631b22106b8a5e528afd2279f31c6064fd36138129eb52e6