Analysis

  • max time kernel
    148s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/06/2024, 19:40

General

  • Target

    dns-service.exe

  • Size

    558KB

  • MD5

    a818f689932c0026bd821fdd9c7d6bc6

  • SHA1

    814dd3a72eb4141f9ff40ab33934a3418e6bc098

  • SHA256

    a4f01360d96933e030be44c19cad1b4be027c598541278fc214ecff9e8a49eec

  • SHA512

    49d25846f2124bf8f10f1bb82264fd21ca585030d537984dec6346251959c0b68e623bcc8d7082aaa4add01a6b23069c129f624098ba7bd53c1b8d3560e5144a

  • SSDEEP

    12288:O5ezZe1HD1MmWx1ZVUc4RHX2rMPWzWA/WvzDd6wU6fvMlNFcb5Tyf7DfCFOLXhpY:tzQMmw1ZVr4RHX0jB+vzDUl6nMlNFcbE

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\dns-service.exe
    "C:\Users\Admin\AppData\Local\Temp\dns-service.exe"
    1⤵
      PID:380

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/380-7-0x0000000000401000-0x0000000000463000-memory.dmp

      Filesize

      392KB

    • memory/380-6-0x0000000068880000-0x0000000068DAB000-memory.dmp

      Filesize

      5.2MB

    • memory/380-8-0x0000000068881000-0x0000000068B28000-memory.dmp

      Filesize

      2.7MB

    • memory/380-5-0x0000000064940000-0x0000000064954000-memory.dmp

      Filesize

      80KB

    • memory/380-4-0x000000006FC40000-0x000000006FD41000-memory.dmp

      Filesize

      1.0MB

    • memory/380-3-0x000000006E940000-0x000000006E964000-memory.dmp

      Filesize

      144KB

    • memory/380-2-0x0000000069700000-0x0000000069894000-memory.dmp

      Filesize

      1.6MB

    • memory/380-1-0x0000000065A40000-0x0000000065A81000-memory.dmp

      Filesize

      260KB

    • memory/380-0-0x0000000000400000-0x0000000000493000-memory.dmp

      Filesize

      588KB