1906ad6b2e16ce452e4009fafedb5344eff3a01fe1b705c7668976963152fb46 | Triage

Analysis

max time kernel
23s
max time network
20s
platform
windows10-1703_x64
resource
win10-20240404-en
resource tags

arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
submitted
22-05-2024 03:13

Sharing

Report Analysis Logs

General

Target

HitlerXAPI(1).exe
Size

111KB
MD5

06843e6300546786a605e3a3fbfd8a9b
SHA1

fba1a0615bb6a4179b102eaf121f96499b00e74e
SHA256

1906ad6b2e16ce452e4009fafedb5344eff3a01fe1b705c7668976963152fb46
SHA512

109eae6e21a7f6d033750319986b191baee5713ac7b9399112abd8ee81179b03bb35da4d0fdb76bdb54ec82e9428ae50ba599a8782ce208479d1b7a9d41e9ada
SSDEEP

3072:bT3EzFWsZq8ao95HRJOo4i8ppkn4oZz7w:bT3EzFWscoPHjO1Zppc4Qz7w

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 4 IoCs

Processes:

HitlerXAPI(1).exeHitlerXAPI(1).exe

pid process

4748 HitlerXAPI(1).exe
4748 HitlerXAPI(1).exe
4708 HitlerXAPI(1).exe
4708 HitlerXAPI(1).exe

C:\Users\Admin\AppData\Local\Temp\HitlerXAPI(1).exe
"C:\Users\Admin\AppData\Local\Temp\HitlerXAPI(1).exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4748

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4676

C:\Users\Admin\AppData\Local\Temp\HitlerXAPI(1).exe
"C:\Users\Admin\AppData\Local\Temp\HitlerXAPI(1).exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4708

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...