bbd05de19aa2af1455c0494639215898a15286d9b05073b6c4817fe24b2c36fa | Triage

Analysis

max time kernel
133s
max time network
139s
platform
windows10-1703_x64
resource
win10-20240404-en
resource tags

arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
submitted
28/06/2024, 09:49 UTC

Sharing

Report Analysis Logs

General

Target

book 4.zip
Size

28KB
MD5

38605a41eda691b378c8304bf914c777
SHA1

75f2667ccacce7c7947c186dca5029ffee720c01
SHA256

f791bea6d653eddcaf8be57e45b698e75f105e28a20c50f519ad43a2b2e27b2a
SHA512

d1876ebad38543260b3c4a2b83b69546da52b093f459890835ad02ea65ea712e91f40c5bf9ae0313fa2f4fec303cea2348c5272a4ac70088d1dbffb7d5163374
SSDEEP

768:os5/i8xs5/i8As5/i83s5/i8qs5/i89s5/i8Ms5/i8zs5/i8Cs5/i8ps5/i8hs5S:ouDu2uNucuHu6uBuUu7uTuGuduguXuKz

Score

1^/10

Malware Config

Signatures

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,"C:\Users\Admin\AppData\Local\Temp\book 4.zip"
1⤵
PID:2768

Network

DNS

13.227.111.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

13.227.111.52.in-addr.arpa

IN PTR

Response
DNS

89.16.208.104.in-addr.arpa

Remote address:

8.8.8.8:53

Request

89.16.208.104.in-addr.arpa

IN PTR

Response

No results found

8.8.8.8:53

13.227.111.52.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

13.227.111.52.in-addr.arpa
8.8.8.8:53

89.16.208.104.in-addr.arpa

dns

72 B
146 B
1
1

DNS Request

89.16.208.104.in-addr.arpa

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads