Overview

overview

8

Static

static

3

ClientUpda...4).exe

windows7-x64

1

ClientUpda...4).exe

windows10-2004-x64

1

ClientUpda...6).exe

windows7-x64

8

ClientUpda...6).exe

windows10-2004-x64

8

Dustman.exe

windows7-x64

7

Dustman.exe

windows10-2004-x64

7

agent.exe

windows7-x64

1

agent.exe

windows10-2004-x64

1

1EF610B1F9...9D.exe

windows7-x64

1

1EF610B1F9...9D.exe

windows10-2004-x64

1

Resubmissions

29/06/2024, 20:48

240629-zlmr7awbre 8

29/06/2024, 20:47

240629-zlcbfswbra 8

Analysis

  • max time kernel
    51s
  • max time network
    53s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/06/2024, 20:47

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1EF610B1F9646063F96AD880AAD9569D.exe

  • Size

    143KB

  • MD5

    1ef610b1f9646063f96ad880aad9569d

  • SHA1

    bb1ca3681747a48d82d2a95d573ee82adff2b0bd

  • SHA256

    563653399b82cd443f120eceff836ea3678d4cf11d9b351bb737573c2d856299

  • SHA512

    d60698a68ce362eb348b506e27c3aeec65f64e118687b927e1b2f23da573365147c1271f9ce5b671445ee0712c0658e15da8325def2ea60eb0ef65c56caa0ff0

  • SSDEEP

    3072:LVdxH/6/8k2spAtOvXI35qpKvM9EUbE0i3:Zb6835qpKvMzvi3

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: LoadsDriver 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1EF610B1F9646063F96AD880AAD9569D.exe
    "C:\Users\Admin\AppData\Local\Temp\1EF610B1F9646063F96AD880AAD9569D.exe"
    1⤵
      PID:8

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads