Overview

overview

10

Static

static

3

c5018a3915...mp.exe

windows7-x64

10

c5018a3915...mp.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    147s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14/06/2024, 14:37

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    c5018a3915e8a9de41e083f7936c2d232b9a73ba41c8c07fb7b2d90d5f5d8e8e_dump.exe
  • Size 16KB
  • Sample240614-ry481avcma
  • SHA256 b63a0e5f93b26ad0eeb9efba66691f3b7e7f51e93a2f0098bde43833f7a24cc2
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c5018a3915e8a9de41e083f7936c2d232b9a73ba41c8c07fb7b2d90d5f5d8e8e_dump.exe
    "C:\Users\Admin\AppData\Local\Temp\c5018a3915e8a9de41e083f7936c2d232b9a73ba41c8c07fb7b2d90d5f5d8e8e_dump.exe"
    1⤵
    • Drops file in Windows directory
    PID:2188
  • C:\ProgramData\oorisd\xelt.exe
    C:\ProgramData\oorisd\xelt.exe
    1⤵
    • Executes dropped EXE
    PID:528

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        xelt.exe
        • Path C:\ProgramData\oorisd\xelt.exe
        • Size 16KB
        • SHA256 b63a0e5f93b26ad0eeb9efba66691f3b7e7f51e93a2f0098bde43833f7a24cc2
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Test Task17.job
        • Path C:\Windows\Tasks\Test Task17.job
        • Size 234B
        • SHA256 698cad0c250cf59caa258e658593ffb9daebbaad6307fdb42731ead3c742d2f2
        • MD5 SHA1 SHA512
        Submit Download