Overview

overview

10

Static

static

3

61c8ee9e80...18.exe

windows7-x64

10

61c8ee9e80...18.exe

windows10-2004-x64

10

$APPDATA/1...es.exe

windows7-x64

1

$APPDATA/1...es.exe

windows10-2004-x64

1

$APPDATA/1...de.dll

windows7-x64

1

$APPDATA/1...de.dll

windows10-2004-x64

1

$APPDATA/k...60.dll

windows7-x64

1

$APPDATA/k...60.dll

windows10-2004-x64

1

$APPDATA/k...te.exe

windows7-x64

1

$APPDATA/k...te.exe

windows10-2004-x64

1

$APPDATA/r...cr.dll

windows7-x64

1

$APPDATA/r...cr.dll

windows10-2004-x64

1

$APPDATA/r...ls.dll

windows7-x64

1

$APPDATA/r...ls.dll

windows10-2004-x64

1

$APPDATA/r...om.dll

windows7-x64

1

$APPDATA/r...om.dll

windows10-2004-x64

1

$TEMP/Blackface.dll

windows7-x64

10

$TEMP/Blackface.dll

windows10-2004-x64

10

$TEMP/am/a...UI.dll

windows7-x64

1

$TEMP/am/a...UI.dll

windows10-2004-x64

1

$TEMP/disp...60.dll

windows7-x64

1

$TEMP/disp...60.dll

windows10-2004-x64

1

$TEMP/mcha...60.dll

windows7-x64

1

$TEMP/mcha...60.dll

windows10-2004-x64

1

$TEMP/mcha...60.dll

windows7-x64

1

$TEMP/mcha...60.dll

windows10-2004-x64

1

$TEMP/mcha...ct.dll

windows7-x64

1

$TEMP/mcha...ct.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21-05-2024 02:44

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    $APPDATA/keywords/bs/aspnetstate.exe

  • Size

    29KB

  • MD5

    d33c507942299753868204cc7642fa27

  • SHA1

    671870a43febef51228e8507b36d0cb6ffa0cff2

  • SHA256

    4e7096d6f4b1176c4823540427219988ac9180e70954d3bf32a6c15ed1332670

  • SHA512

    ae4516a061a8e8b22780043685485126a96feff6917d5e52574d3afdd957d44d051e6c437eb499260a5980959ea3162b18496f2bce8a56b6aec85df6da5e565a

  • SSDEEP

    768:fNalEibjHz9kFmw0D+iwGqC+iIL3d/o+g:fPS6cw05wGj7IR/oF

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\$APPDATA\keywords\bs\aspnetstate.exe
    "C:\Users\Admin\AppData\Local\Temp\$APPDATA\keywords\bs\aspnetstate.exe"
    1⤵
      PID:2812

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads