Analysis

  • max time kernel
    159s
  • max time network
    175s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16/05/2024, 00:06

General

  • Target

    MirServer/Mir200/M2Server.exe

  • Size

    540KB

  • MD5

    ad2b28afc20091c672e91fbcecacf812

  • SHA1

    eb537885fa6e988df31c41be2339ae299a4baa34

  • SHA256

    852b805835218cf01a34a6a87e13dfea342e84b054e0142e71f7fdbe5b78ecb9

  • SHA512

    b3545799b5020b0cab6464aa8a7891805326dc79f5b1c653f935338a7e77f2a4ad1893dd2e0c7403eb583d0456d473f411092b6166ed9ce939f7ee86c2c4f620

  • SSDEEP

    12288:1eVhp/MdfWIqSyYXoYFEIoMn8yUgm9KsOVHGJMiSZ6:1eVhpifXqSyY48E6nrIvOVHH

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\MirServer\Mir200\M2Server.exe
    "C:\Users\Admin\AppData\Local\Temp\MirServer\Mir200\M2Server.exe"
    1⤵
      PID:3436
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4144 --field-trial-handle=3192,i,2785050981002401924,4037047756083432660,262144 --variations-seed-version /prefetch:8
      1⤵
        PID:4940

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • C:\Users\Admin\AppData\Local\Temp\MirServer\Mir200\!SetUp.txt

        Filesize

        1KB

        MD5

        078caa0f94a67dc6b00c449af94bde24

        SHA1

        1bb3231b8bc7b28ef8d166b4ff5b2ac930749f13

        SHA256

        34acf65aab15d55a11fab37f9fdc8e9532a119a7411b7c9dc3140b411e18904f

        SHA512

        9c9ab1d69872e7b22b53dde0dad02bfc53419a575ae6da120c172f94214eff7af153fd7a7672b3f2333fc3d5cb05931a6f7b0f282d3af1a403a18167ef96fb9f

      • memory/3436-8-0x00000000022C0000-0x00000000022C1000-memory.dmp

        Filesize

        4KB

      • memory/3436-19-0x0000000000400000-0x000000000051F000-memory.dmp

        Filesize

        1.1MB

      • memory/3436-6-0x0000000000400000-0x000000000051F000-memory.dmp

        Filesize

        1.1MB

      • memory/3436-0-0x0000000000400000-0x000000000051F000-memory.dmp

        Filesize

        1.1MB

      • memory/3436-9-0x0000000000400000-0x000000000051F000-memory.dmp

        Filesize

        1.1MB

      • memory/3436-11-0x0000000000400000-0x000000000051F000-memory.dmp

        Filesize

        1.1MB

      • memory/3436-3-0x0000000000400000-0x000000000051F000-memory.dmp

        Filesize

        1.1MB

      • memory/3436-15-0x0000000000400000-0x000000000051F000-memory.dmp

        Filesize

        1.1MB

      • memory/3436-13-0x0000000000400000-0x000000000051F000-memory.dmp

        Filesize

        1.1MB

      • memory/3436-17-0x0000000000400000-0x000000000051F000-memory.dmp

        Filesize

        1.1MB

      • memory/3436-2-0x00000000022C0000-0x00000000022C1000-memory.dmp

        Filesize

        4KB

      • memory/3436-21-0x0000000000400000-0x000000000051F000-memory.dmp

        Filesize

        1.1MB

      • memory/3436-23-0x0000000000400000-0x000000000051F000-memory.dmp

        Filesize

        1.1MB

      • memory/3436-25-0x0000000000400000-0x000000000051F000-memory.dmp

        Filesize

        1.1MB

      • memory/3436-27-0x0000000000400000-0x000000000051F000-memory.dmp

        Filesize

        1.1MB