Analysis
-
max time kernel
112s -
max time network
130s -
platform
windows11-21h2_x64 -
resource
win11-20240426-en -
resource tags
arch:x64arch:x86image:win11-20240426-enlocale:en-usos:windows11-21h2-x64system -
submitted
01/05/2024, 11:28
Static task
static1
Behavioral task
behavioral1
Sample
AfterFX.exe
Resource
win11-20240426-en
General
-
Target
AfterFX.exe
-
Size
1.2MB
-
MD5
3eb89bb58eb24bb4d00a1fdc358f542c
-
SHA1
828bd6b98ab8bedeffa33fc08aa973d2bab62194
-
SHA256
a0b62ee747731cb6af017d6b3e466e2b5ece06680f39bd55bc093038246454fd
-
SHA512
a718321cdb03b150236f887aa3496da01d22fdfd5713c799f5dee1946fca7805b9847ddd890ade45aec9f4d486fb0f8fec8e25da7d3ecc821eb4a6ef0f9d3c46
-
SSDEEP
3072:6ND0TJ5eXmVxI9UZlWRhSXLcgSr9uHUIbvEzX2Cqtid9gtO4hNB:6NCJ5eaxIeHGST+OplxB
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\AfterFX.exe"C:\Users\Admin\AppData\Local\Temp\AfterFX.exe"1⤵PID:4516
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:484
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
379KB
MD5a98fcac112270c9cbfa47633be08a31e
SHA17d97f6a81c1f6e26662605bc3f671fb52b88d85f
SHA256ca13ea189516bc6cda44d9bedd567c451f0761223a98e95d1e2281cac8e2c481
SHA5125e75b7ed83edb7fbd6d297a782d4ff9e47a9a024afc4b1f6e1ef1d258d38fc5b310a03978740d4063add962047583a352edeb663b29ec018288981731fb0f9b7
-
Filesize
86KB
MD54e27562f2e296b1102b0b3fd5e8e832e
SHA17a2f5481e37e5a88278d374f9d01a60b43ba6354
SHA256d2774b2ebc2383829953e934815b6d488090380959b9240a27704c68444e475e
SHA512b6fcaaf16cb9bba89238c341e68764d74160a0fc4ed1ffc2745f82b81fae01dc7bca66835077de56caae02f7e15d2e92503dfdc95d6158a467b7b1744c606a67
-
Filesize
395KB
MD5434a279e7929aa1d7a02b46260bfb96e
SHA1ff9c80c63f9ff08ec42b4d98ddfb7a0ef6fc40c8
SHA256058968cc2d2e974b6fc2945aab3abcd0578c0e447da25ea4ffe2c5f0179b0f5a
SHA512044c02105d354ed70fd3dbaaf3aebb60fdec6a561629c55d11e7dd655271973d66be81c82d6e06f65158a3233cf76f67d2bca63c021f31ff3641eb74cf6b943c
-
Filesize
81KB
MD56385bf4c72c26afd2126e35550699f6b
SHA14438ccaef1a22906b7191c17f763456fa815cd9d
SHA256490a5cce193e3851fd7fa7f2713a8d6c300f225dfc3b280560078e9e840ad8c7
SHA5122b22d7361e08fc96bd2587b61e57b43082ffcf4f2680070c4bf65529e0ab6a1ce1632e6a827f7acbb9b7683947932fe67f52a783cefe54892de05f9faf001fb8
-
Filesize
167KB
MD5b8e472210cdb0435bbc05fa7f9941892
SHA15f8e1a5a800cdba0d7d4f8817813b9855a60778f
SHA25613868a69d1120dfb6024faa6f2c38bd222e89898aff34867fea99283c9e68aa4
SHA5121a1b6de16fef21fc07dc9bd586e327ec40832e272db4d0213595c83e1d8d3d974eb978bc31d2c9d571d557bdc7fca3d8987da3e7ee76d0a91a4f098084dedfc0
-
Filesize
195KB
MD562487b2f546ceca198817068ff73c01c
SHA1a894f5a33237287d5dd8be0d72ce4f02c65ae57a
SHA25658fa20040005595fd65ac133e107bbe6a0a79471ce544ad6b92838c8038bfe13
SHA512ced71b39870d50711663bbde235f4b0d86420c26478418018fe2dd85594e5b3fbb95e8450f239bcbae15849ac5274102f07e195728558628a69900256a8f7240
-
Filesize
171KB
MD540aecbb2b749fedbdb70f7a77c1350ec
SHA163364662b4f3a6cac5ccaa21a0e4745f88b42971
SHA25680866a7ed51467208e2cac53800b0b9588c20824d5782352bb3979ceb430f078
SHA5122154a87b89fc07b2edc925d45b23af79f33ad7fe73d2ac0dc0014f0a2e9cd8c419077f2d65e1b419a4e8432a671a917989590aebd2f7587c9cb6609a8d0c6aad
-
Filesize
208KB
MD54915b8ce5e33d3ab4a689d245fdeeda8
SHA1a3a7580b0ed0c88b943ea0b6f29f9ff767b495d7
SHA25622f0b47d78341b4b8e7cc6a30f263de1e51eba66dbc7a45305edf810df5c2177
SHA512b13894957054cb653136ce976df37e8ecab1cd1f516c599522b0bf22f76eafc5f3165ee03c55bfba9e175da3a5a071b2149d91ba5e61723119494679c1ffd0c0
-
Filesize
170KB
MD519cbae431ec12b6c647028e183af7615
SHA1ff5a1cce809cb0bbf27a079b20fdada0acdeefb6
SHA2561fefbdcce142e6ba39d1104faf32fdd11bc566e33187ef236575cdd8827ce28f
SHA512c88606e7de6ada5f7d991161f0e55c207a3ca78057f1768abd6ea09661dd7418e75d6e183cc8db7576cc27d8a7a73db220e6e82c5cc1bc0832b555e1dd2bc71c
-
Filesize
190KB
MD5ddf4c077546717c199a80f35ebb5a62c
SHA1aceb5d1a144d5926296869ce475c83ed934e09ae
SHA256c90103e8055388849beb6b843bac5247efaaedbf06ed7014c006eeb50f6c66e9
SHA512f50dfd3dcc8b786413105e451b0956c31e70b818365d17cccacdcadf2a3564b80b2ebd52e6478f54a1d3e1feedb13d1d0ea476e58d56033c7f2ff9949b8a38e1
-
Filesize
170KB
MD5572a4c5e11edeac90f5051cc0e866af0
SHA1d54ce6d3bfc25e7ad929e7ca133180a21d93db10
SHA256992a253aae667769d95fca40d2d36d72c8791974d5bdf302fa50fa2a826eec65
SHA5122e8c3570f6bcf7d48f88e288fd08b93a806fd4772b899821b3cd89702acf12b365ab29057bad5df13f2921e305e57ffc2150a7dfc14280cde51843c16ad1db16
-
Filesize
198KB
MD5a274761f7c466df599e4d79fb6ba5693
SHA1441df9ea6e0423363a3221c41f8ab663bd18648d
SHA256fa450879d2c2f485374404ef003cb8cc7cb3d7e4022a23d1821af9f449ec5bd2
SHA512389ad26091c9eb81b3b4c3ba2dab4c21042be8bfcf2eb57ee5236318ff38474daf93ed93292ae2327dd077f614b1b4a442faf49a58bacda3ac162e4c0d4e5526
-
Filesize
123KB
MD5d7c0187b22b91eb7e18905e69cebbd11
SHA190dce09ca55b276d9fc613da8641f7942c3476d3
SHA25618df64c9f21b2760c32f592f33d1087cccd9b6fd44387b94f04019737408bec3
SHA512a65637de04ac4e1fb368c495f1157194e5582a48ef68498ae285ed5b5cb59a719580ad1f6ca0fc9e54cd03fd2949b2861644d0b87f56992bba3e20c2b9cdc296
-
Filesize
129KB
MD569cf3548c72f49d9abdc52f292efc391
SHA1304d001755bd4ddc63c601cc743cca7b75772a95
SHA256864aadcc7c9f81cb15d237af4fe473df9537bc3b8b62987a3b8edba02dcf54d5
SHA512dbffd9d2fdd65a5c9a5eab7fe32d8235837f3ed3a4ec960a75c7e14fe36e7a8c704e1428195be1459399b98d4df9f86b5c38bd70706e6a29ea762c6623be4da1
-
Filesize
123KB
MD57988d6c13995b6211b5b30b16cde4323
SHA1bdeed037f504d2196c971a3f5528e01ae6c7c79b
SHA256ae3d0df77b0a8b882b4faf850d3976b674861794f03df7e83f4b22ad77487f72
SHA5124f2483b6d5b7ff1c7445f0b7061c76e1a801bb73fdf769b01f1956aa1d12d2071697592a0b154797efe4a427f1e1ee32e90af88728aa2bd9a62d745f69cc2d68
-
Filesize
135KB
MD5eecad8ea195c2021aa5be7bc807e3081
SHA1a7304fce4c69e3d644327e4859be5137a8740227
SHA256a04693c869e238cce81da43b42119764fa4ba430f1414440d1acaa6e09784cf4
SHA51215d681d985cb3f2a27a588159ba1e764996801ceff44a0afe49f085ad7762bd9a73f99694255cabe9a75ed13d1769bbdc7a8a5d85b891fa9b8d9457ea49160be