Analysis

  • max time kernel
    133s
  • max time network
    102s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240419-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04-05-2024 14:21

General

  • Target

    63dce372419c144007b297d5e1cf6067d69dc85d3e3fa80c5fe2d93c87570854.exe

  • Size

    3.6MB

  • MD5

    68fcdc88a649223620801db8a14c1182

  • SHA1

    b052afe3af7d113ed2dbd3d6d1db273a1bc25e88

  • SHA256

    63dce372419c144007b297d5e1cf6067d69dc85d3e3fa80c5fe2d93c87570854

  • SHA512

    7ca637dbb02cec3ab9033ad65134a40593ada5c160b0c34c6a293fe010ef68c1bee91ba43f9c49f0eb58771e7c9f730c9d0c9effa8cc9e8dbb7f0773d9971e71

  • SSDEEP

    98304:M6666666666666666666666666666666x666666666666666fwwwwwwwwwwwwww+:OWhn

Score
6/10

Malware Config

Signatures

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\63dce372419c144007b297d5e1cf6067d69dc85d3e3fa80c5fe2d93c87570854.exe
    "C:\Users\Admin\AppData\Local\Temp\63dce372419c144007b297d5e1cf6067d69dc85d3e3fa80c5fe2d93c87570854.exe"
    1⤵
      PID:3820

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3820-8-0x0000000002520000-0x0000000002587000-memory.dmp

      Filesize

      412KB

    • memory/3820-5-0x0000000000400000-0x0000000000824000-memory.dmp

      Filesize

      4.1MB

    • memory/3820-1-0x0000000002520000-0x0000000002587000-memory.dmp

      Filesize

      412KB

    • memory/3820-12-0x0000000000400000-0x0000000000824000-memory.dmp

      Filesize

      4.1MB