Analysis

  • max time kernel
    138s
  • max time network
    144s
  • platform
    windows10-1703_x64
  • resource
    win10-20240404-en
  • resource tags

    arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
  • submitted
    29-06-2024 23:28

General

  • Target

    builder.exe

  • Size

    10KB

  • MD5

    4f04f0e1ff050abf6f1696be1e8bb039

  • SHA1

    bebf3088fff4595bfb53aea6af11741946bbd9ce

  • SHA256

    ded51c306ee7e59fa15c42798c80f988f6310ea77ab77de3d12dc01233757cfa

  • SHA512

    94713824b81de323e368fde18679ef8b8f2883378bffd2b7bd2b4e4bd5d48b35c6e71c9f8e9b058ba497db1bd0781807e5b7cecfd540dad611da0986c72b9f12

  • SSDEEP

    96:IJXYAuB2glBLgyOk3LxdjP2rm549JSTuwUYXzP+B1izXTa/HFpff3LG+tzNt:IJXDk7LI4uwtDPC1ijCHffSs

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\builder.exe
    "C:\Users\Admin\AppData\Local\Temp\builder.exe"
    1⤵
      PID:2872
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
      1⤵
        PID:3260

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/2872-0-0x00000000737AE000-0x00000000737AF000-memory.dmp
        Filesize

        4KB

      • memory/2872-1-0x00000000007F0000-0x00000000007F8000-memory.dmp
        Filesize

        32KB

      • memory/2872-2-0x0000000005510000-0x0000000005A0E000-memory.dmp
        Filesize

        5.0MB

      • memory/2872-3-0x00000000050B0000-0x0000000005142000-memory.dmp
        Filesize

        584KB

      • memory/2872-4-0x0000000005060000-0x000000000506A000-memory.dmp
        Filesize

        40KB

      • memory/2872-5-0x00000000737A0000-0x0000000073E8E000-memory.dmp
        Filesize

        6.9MB

      • memory/2872-6-0x0000000008240000-0x0000000008362000-memory.dmp
        Filesize

        1.1MB

      • memory/2872-8-0x00000000737A0000-0x0000000073E8E000-memory.dmp
        Filesize

        6.9MB

      • memory/2872-10-0x00000000737A0000-0x0000000073E8E000-memory.dmp
        Filesize

        6.9MB