Overview

overview

8

Static

static

3

68f15793cd...18.exe

windows7-x64

8

68f15793cd...18.exe

windows10-2004-x64

8

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

CashReminder.exe

windows7-x64

1

CashReminder.exe

windows10-2004-x64

1

ProtocolFilters.dll

windows7-x64

1

ProtocolFilters.dll

windows10-2004-x64

3

crfilterdrv.sys

windows7-x64

1

crfilterdrv.sys

windows10-2004-x64

1

libeay32.dll

windows7-x64

1

libeay32.dll

windows10-2004-x64

1

nfapi.dll

windows7-x64

1

nfapi.dll

windows10-2004-x64

1

ssleay32.dll

windows7-x64

1

ssleay32.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    22-05-2024 23:04

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    CashReminder.exe

  • Size

    433KB

  • MD5

    e6791bdbe847d61dd230d755959f2da5

  • SHA1

    dd8594aeb11317135d36382a1961bc9d5893c97f

  • SHA256

    1598a10fd9bff8ba91aca0e500cf6d0c8b338d34adf4559adf2af5c1a0964b09

  • SHA512

    f80e64a7d15bee857a7c38fefa2cb7490a46427cce0b972ffdf96c90ea99f698e069672e7ea7570e8d76fba07a664699468009d1e6173d83cdc9fc94e60135e8

  • SSDEEP

    12288:Q/G5VlcQFpXtvXbF0MYQFNJpZ/84m8TpV6ZID:K+s2HXbF0fu5k8NVb

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\CashReminder.exe
    "C:\Users\Admin\AppData\Local\Temp\CashReminder.exe"
    1⤵
      PID:3036

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3036-0-0x00000000002C0000-0x000000000031C000-memory.dmp
      Filesize

      368KB

      Download
    • memory/3036-2-0x0000000000320000-0x000000000037D000-memory.dmp
      Filesize

      372KB

      Download
    • memory/3036-4-0x0000000000610000-0x0000000000783000-memory.dmp
      Filesize

      1.4MB

      Download
    • memory/3036-6-0x0000000000380000-0x0000000000381000-memory.dmp
      Filesize

      4KB

      Download
    • memory/3036-7-0x0000000000400000-0x0000000000471000-memory.dmp
      Filesize

      452KB

      Download