Overview

overview

10

Static

static

3

Resource/A...me.xml

windows10-2004-x64

1

Resource/A...gs.xml

windows10-2004-x64

1

Resource/T...r.admx

windows10-2004-x64

3

Resource/T...r.admx

windows10-2004-x64

3

Resource/T...r.admx

windows10-2004-x64

3

Resource/inetres.xml

windows10-2004-x64

1

Resource/kdc.admx

windows10-2004-x64

3

Resource/msched.xml

windows10-2004-x64

1

Resource/nca.admx

windows10-2004-x64

3

Resource/pca.admx

windows10-2004-x64

3

Resource/s...g.admx

windows10-2004-x64

3

Resource/srm-fci.admx

windows10-2004-x64

3

Resource/tcpip.xml

windows10-2004-x64

1

Resource/wlansvc.xml

windows10-2004-x64

1

Resource/wwansvc.xml

windows10-2004-x64

1

Setup.exe

windows10-2004-x64

10

cufflink.vcf

windows10-2004-x64

3

madbasic_.dll

windows10-2004-x64

1

maddisAsm_.dll

windows10-2004-x64

1

madexcept_.dll

windows10-2004-x64

1

quin.doc

windows10-2004-x64

1

resources.pak

windows10-2004-x64

3

rtl120.dll

windows10-2004-x64

1

vcl120.dll

windows10-2004-x64

1

vclx120.dll

windows10-2004-x64

3

x64/Templa...te.htm

windows10-2004-x64

1

x64/plugin...ns.dll

windows10-2004-x64

1

x64/ripp.exe

windows10-2004-x64

1

x64/tipa.exe

windows10-2004-x64

1

x64/upd.exe

windows10-2004-x64

8

x64/zlib.exe

windows10-2004-x64

1

8866 Passwords.txt

windows10-2004-x64

1

Resubmissions

17-04-2024 07:33

240417-jdvvtsae31 10

17-04-2024 06:33

240417-ha7jsahe7s 10

Analysis

  • max time kernel
    230s
  • max time network
    310s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    17-04-2024 06:33

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    x64/ripp.exe

  • Size

    40KB

  • MD5

    ca57ccdabc7df2e63aa1cb548c59686f

  • SHA1

    1a4037a55b55b9df0e81e9f4a1ecc832aa721142

  • SHA256

    8e7206850a4b3c6a3f53739c31e78f7916f3547f392f69e6b475e671244c437d

  • SHA512

    1c514ffcf33c688802cd78997502e51c9551bee125f5dc1942803374b426476d11eec24086a718b81e7c3c4149a77a7a00f7ee5be944a780b58c9625f76824fd

  • SSDEEP

    384:H3NXAdTmGbOiXQ/Y4GO70pzE2NeeamkdQPJ/q184kWojlWHl70GftpBjvlXM+Mcj:XAKGZXY7B2YmkyJ/M8wGijXRMBhtydr

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\x64\ripp.exe
    "C:\Users\Admin\AppData\Local\Temp\x64\ripp.exe"
    1⤵
      PID:2272
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=2232 --field-trial-handle=2284,i,15722001240173834669,15048020084704567542,262144 --variations-seed-version /prefetch:8
      1⤵
        PID:1856

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/2272-0-0x00000000744E0000-0x0000000074C90000-memory.dmp

        Filesize

        7.7MB

        Download

      • memory/2272-1-0x0000000000570000-0x000000000057C000-memory.dmp

        Filesize

        48KB

        Download

      • memory/2272-2-0x0000000002880000-0x0000000002890000-memory.dmp

        Filesize

        64KB

        Download

      • memory/2272-4-0x00000000744E0000-0x0000000074C90000-memory.dmp

        Filesize

        7.7MB

        Download