Resubmissions

13/06/2024, 02:09

240613-clbzcs1bjf9

13/06/2024, 01:46

240613-b7cmcatdjm9

Analysis

  • max time kernel
    1860s
  • max time network
    258s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240508-en
  • resource tags

    arch:x64arch:x86image:win11-20240508-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    13/06/2024, 02:09

General

  • Target
    UDP Flashflood v1.0/UDP Flashflood v1.0 by BrutuS.exe
  • Size 48KB
  • Sample240613-clbzcs1bjf
  • SHA256 cf272129a609777249355a1a1bef6d0748f0d096f01ce753fca83c0087062199
  • MD5 SHA1 SHA512 SSDEEP
Score
9/10

Malware Config

Signatures

  • Creates a large amount of network flows 1 TTPs

    This may indicate a network scan to discover remotely running services.

  • Unexpected DNS network traffic destination 64 IoCs

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

Processes

  • C:\Users\Admin\AppData\Local\Temp\UDP Flashflood v1.0\UDP Flashflood v1.0 by BrutuS.exe
    "C:\Users\Admin\AppData\Local\Temp\UDP Flashflood v1.0\UDP Flashflood v1.0 by BrutuS.exe"
    1⤵
      PID:4924

    Network

          MITRE ATT&CK Enterprise v15

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          memory/4924-0-0x00007FFF97285000-0x00007FFF97286000-memory.dmp

          memory/4924-1-0x00007FFF96FD0000-0x00007FFF97971000-memory.dmp

          memory/4924-2-0x000000001B5A0000-0x000000001B646000-memory.dmp

          memory/4924-3-0x00007FFF96FD0000-0x00007FFF97971000-memory.dmp

          memory/4924-4-0x00007FFF97285000-0x00007FFF97286000-memory.dmp

          memory/4924-5-0x00007FFF96FD0000-0x00007FFF97971000-memory.dmp