Analysis
- max time kernel
1050s - max time network
303s - platform
windows11-21h2_x64 - resource
win11-20240508-en - resource tags
- submitted
13/06/2024, 02:19
General
- Target UDP Flashflood v1.0/UDP Flashflood v1.0 by BrutuS.exe
- Size 48KB
- Sample240613-cryejsvcjr
- SHA256 cf272129a609777249355a1a1bef6d0748f0d096f01ce753fca83c0087062199
Score
9/10
Malware Config
Signatures
- Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
- Unexpected DNS network traffic destination 64 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Processes
-
C:\Users\Admin\AppData\Local\Temp\UDP Flashflood v1.0\UDP Flashflood v1.0 by BrutuS.exe"C:\Users\Admin\AppData\Local\Temp\UDP Flashflood v1.0\UDP Flashflood v1.0 by BrutuS.exe"1⤵
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3064-0-0x00007FF829A45000-0x00007FF829A46000-memory.dmp
memory/3064-1-0x00007FF829790000-0x00007FF82A131000-memory.dmp
memory/3064-2-0x000000001BAB0000-0x000000001BB56000-memory.dmp
memory/3064-3-0x00007FF829790000-0x00007FF82A131000-memory.dmp
memory/3064-4-0x00007FF829A45000-0x00007FF829A46000-memory.dmp
memory/3064-5-0x00007FF829790000-0x00007FF82A131000-memory.dmp
memory/3064-6-0x00007FF829790000-0x00007FF82A131000-memory.dmp