Analysis

  • max time kernel
    150s
  • max time network
    155s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    13-06-2024 05:25

General

  • Target

    b0b39f058a958778b15a5c4589a2938d.exe

  • Size

    58KB

  • MD5

    b0b39f058a958778b15a5c4589a2938d

  • SHA1

    4ac41974f8a14a102387651f14b8da04d76b347e

  • SHA256

    83ddeae065372a15431613ae9bc04d476e1b06af5011809df3f7b21d5a3d262a

  • SHA512

    7dda632e890f2e0dee9f7515976ca27399c9a3b4c554a046a344a212c6bbda85ff645b14167f088c2b32f101ce0c5062f78b9236d26fe61f82f7462baa03e3bd

  • SSDEEP

    1536:VTdytmznUkJTbcBPQtXCUP5rKdQz4nBxP5l+KO816v:tdy0znnbpDlszql

Score
8/10

Malware Config

Signatures

  • Contacts a large (517) amount of remote hosts 1 TTPs

    This may indicate a network scan to discover remotely running services.

  • Modifies registry class 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b0b39f058a958778b15a5c4589a2938d.exe
    "C:\Users\Admin\AppData\Local\Temp\b0b39f058a958778b15a5c4589a2938d.exe"
    1⤵
    • Modifies registry class
    PID:3024

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3024-0-0x0000000000400000-0x0000000000420000-memory.dmp

    Filesize

    128KB

  • memory/3024-7-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-9-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-11-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-12-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-13-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-15-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-14-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-16-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-18-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-19-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-20-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-22-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-23-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-25-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-26-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-28-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-29-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-30-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-32-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-33-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-35-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-36-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-38-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-39-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-41-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-42-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-43-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-45-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-46-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-47-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-49-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-50-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-51-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-53-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-54-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-55-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-57-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-58-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-59-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-60-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-61-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-62-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-63-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-65-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-64-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-56-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-52-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-48-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-44-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-40-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-37-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-34-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-31-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-27-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-24-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-21-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-17-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-10-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-8-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-6-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-5-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-4-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-2-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB

  • memory/3024-482-0x0000000000020000-0x000000000003E000-memory.dmp

    Filesize

    120KB