Overview

overview

1

Static

static

1

s.exe

windows11-21h2-x64

1

Analysis

  • max time kernel
    460s
  • max time network
    1181s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240426-en
  • resource tags

    arch:x64arch:x86image:win11-20240426-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    02/06/2024, 16:34

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    s.exe

  • Size

    3.9MB

  • MD5

    ee685c7ac3190546c6aa4ddb91d5b471

  • SHA1

    074bc517434ccebd84890a173c7b5ce0f4b448a5

  • SHA256

    43a3fd549edbdf0acc6f00e5ceaa54c086ef048593bfbb9a5793f52a7cc57d1c

  • SHA512

    e6642352f005b0e0e79d7804057b5a73c59054f16a4f8b29114a7e29ea082eba8ae17e5415b77a08b09e76ff66e5bc2b3a21a0481c729fb787d2053c4e413f9c

  • SSDEEP

    49152:L8XUIru+DHq5efMrRzENGtlqZ5MZr4xGrMNHK+G9KBSiIVwASOM2M7li2FIU6iG+:L84D5Bup2gkj+Rh3x6bbnjC

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\s.exe
    "C:\Users\Admin\AppData\Local\Temp\s.exe"
    1⤵
      PID:3812
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
      1⤵
        PID:1944
      • C:\Users\Admin\AppData\Local\Temp\s.exe
        "C:\Users\Admin\AppData\Local\Temp\s.exe"
        1⤵
          PID:1896
        • C:\Users\Admin\AppData\Local\Temp\s.exe
          "C:\Users\Admin\AppData\Local\Temp\s.exe"
          1⤵
            PID:1920
          • C:\Users\Admin\AppData\Local\Temp\s.exe
            "C:\Users\Admin\AppData\Local\Temp\s.exe"
            1⤵
              PID:1440
            • C:\Users\Admin\AppData\Local\Temp\s.exe
              "C:\Users\Admin\AppData\Local\Temp\s.exe"
              1⤵
                PID:996
              • C:\Users\Admin\Desktop\s.exe
                "C:\Users\Admin\Desktop\s.exe"
                1⤵
                  PID:1328
                • C:\Users\Admin\Desktop\s.exe
                  "C:\Users\Admin\Desktop\s.exe"
                  1⤵
                    PID:1604
                  • C:\Users\Admin\Desktop\s.exe
                    "C:\Users\Admin\Desktop\s.exe"
                    1⤵
                      PID:2204

                    Network

                          MITRE ATT&CK Matrix

                          Replay Monitor

                          Loading Replay Monitor...

                          Downloads