Analysis

  • max time kernel
    147s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/06/2024, 01:09

General

  • Target

    NCryptXL.exe

  • Size

    346KB

  • MD5

    b505ba4c2531253e89a36beec8c7f176

  • SHA1

    8e0f7cc82aef3667563ec8691bd5856055279ced

  • SHA256

    1d1432c19a4e580ca40e685f626e84875f780385430a964aa4e873e520e152ab

  • SHA512

    1264546b782cb1e8431b8d9bd8762482fa48a5566bd0bcc49940a685fb3be203c7a584c9b8217acc0466ba2d830d30752c233574d397a7fe60d5a7112a6ab31d

  • SSDEEP

    6144:GhV4Sy2YS54LihMXC5DCTXTR4LihMXC5DCDwb:GP4Sy2YS54u2FJ4u2FDwb

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\NCryptXL.exe
    "C:\Users\Admin\AppData\Local\Temp\NCryptXL.exe"
    1⤵
      PID:4480

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4480-0-0x00007FFFF0225000-0x00007FFFF0226000-memory.dmp

      Filesize

      4KB

    • memory/4480-1-0x000000001B0E0000-0x000000001B0F2000-memory.dmp

      Filesize

      72KB

    • memory/4480-2-0x00007FFFEFF70000-0x00007FFFF0911000-memory.dmp

      Filesize

      9.6MB

    • memory/4480-5-0x00007FFFEFF70000-0x00007FFFF0911000-memory.dmp

      Filesize

      9.6MB

    • memory/4480-4-0x000000001BE90000-0x000000001BF2C000-memory.dmp

      Filesize

      624KB

    • memory/4480-3-0x000000001B920000-0x000000001BDEE000-memory.dmp

      Filesize

      4.8MB

    • memory/4480-6-0x0000000000CE0000-0x0000000000CE8000-memory.dmp

      Filesize

      32KB

    • memory/4480-7-0x00007FFFEFF70000-0x00007FFFF0911000-memory.dmp

      Filesize

      9.6MB

    • memory/4480-13-0x000000001EC20000-0x000000001EC76000-memory.dmp

      Filesize

      344KB

    • memory/4480-12-0x000000001EBB0000-0x000000001EBBE000-memory.dmp

      Filesize

      56KB

    • memory/4480-11-0x000000001D680000-0x000000001D68A000-memory.dmp

      Filesize

      40KB

    • memory/4480-10-0x000000001C460000-0x000000001C46A000-memory.dmp

      Filesize

      40KB

    • memory/4480-14-0x00007FFFEFF70000-0x00007FFFF0911000-memory.dmp

      Filesize

      9.6MB

    • memory/4480-9-0x000000001D630000-0x000000001D648000-memory.dmp

      Filesize

      96KB

    • memory/4480-8-0x00007FFFEFF70000-0x00007FFFF0911000-memory.dmp

      Filesize

      9.6MB

    • memory/4480-16-0x00007FFFEFF70000-0x00007FFFF0911000-memory.dmp

      Filesize

      9.6MB

    • memory/4480-17-0x00007FFFEFF70000-0x00007FFFF0911000-memory.dmp

      Filesize

      9.6MB

    • memory/4480-18-0x00007FFFF0225000-0x00007FFFF0226000-memory.dmp

      Filesize

      4KB