Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    24-05-2024 18:38

General

  • Target

    $APPDATA/USER/doinstall/strFormId/logo/resgen.exe

  • Size

    36KB

  • MD5

    fe249e495e6aefc8e5efb832a69f3f57

  • SHA1

    a5b37c878fafd676dd1a1b4a752e5d2ddf0fdb20

  • SHA256

    b8de815c5403f6e050222d3951e4ce24d2786db3e659a9bbc5c6b3e79b5127b7

  • SHA512

    8e88c9965c6b0b13cfaa2dbe5e7813568bd92fdaca1101a9c2f54192d143793b87afd433277ebc81a6e6ffc3d8251d8629dc3021708a0c0af27c99f2d63e520c

  • SSDEEP

    384:FMcI3qdirubUVbWxLGvI1XedIaWgX7lfpaVKlcOHz78c5K8NWuiokz196xuL2QP3:9I68VbWxyNdjrpFtQC

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\$APPDATA\USER\doinstall\strFormId\logo\resgen.exe
    "C:\Users\Admin\AppData\Local\Temp\$APPDATA\USER\doinstall\strFormId\logo\resgen.exe"
    1⤵
      PID:2528

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2528-0-0x00000000744E1000-0x00000000744E2000-memory.dmp
      Filesize

      4KB

    • memory/2528-1-0x00000000744E0000-0x0000000074A8B000-memory.dmp
      Filesize

      5.7MB

    • memory/2528-2-0x00000000744E0000-0x0000000074A8B000-memory.dmp
      Filesize

      5.7MB