Analysis

  • max time kernel
    299s
  • max time network
    305s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    04-07-2024 17:59

General

  • Target

    Technoturnover's RAT.exe

  • Size

    6.5MB

  • MD5

    ab8dd193d1279b0e39abc21a372c475b

  • SHA1

    b465fcd3c81cd130868b4dda5ea2247306c9fa3b

  • SHA256

    c6e2f465f16efbabd1a78b2b1edcc164e09c24557e25b07975d9da91c2592add

  • SHA512

    dd15bd4f3da2ac6266b3ea8ed866afaf2831cc73c8c56ec0d55c0415d1c6edfb1d8a15e022b902d9ce14df26790bddfb384b5b812e6f67b6ba95d1b0b82722fb

  • SSDEEP

    196608:HW6b7+e6aPh7zSPmU4XpPslhVj7Z5XxHKbwqQ:tb7d57zSPT49slZqE

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\Technoturnover's RAT.exe
    "C:\Users\Admin\AppData\Local\Temp\Technoturnover's RAT.exe"
    1⤵
      PID:2036

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2036-3-0x000000001E000000-0x000000001E264000-memory.dmp
      Filesize

      2.4MB

    • memory/2036-0-0x0000000078520000-0x00000000785C3000-memory.dmp
      Filesize

      652KB

    • memory/2036-7-0x000000001E7A0000-0x000000001E7BE000-memory.dmp
      Filesize

      120KB

    • memory/2036-11-0x0000000000250000-0x000000000025E000-memory.dmp
      Filesize

      56KB

    • memory/2036-20-0x000000001EB90000-0x000000001EB99000-memory.dmp
      Filesize

      36KB

    • memory/2036-17-0x000000001D110000-0x000000001D116000-memory.dmp
      Filesize

      24KB

    • memory/2036-14-0x0000000010000000-0x0000000010146000-memory.dmp
      Filesize

      1.3MB

    • memory/2036-24-0x0000000000260000-0x0000000000269000-memory.dmp
      Filesize

      36KB

    • memory/2036-27-0x0000000003CF0000-0x0000000003DD3000-memory.dmp
      Filesize

      908KB

    • memory/2036-30-0x0000000000270000-0x000000000027A000-memory.dmp
      Filesize

      40KB

    • memory/2036-33-0x00000000003B0000-0x00000000003B6000-memory.dmp
      Filesize

      24KB

    • memory/2036-36-0x00000000003C0000-0x00000000003C5000-memory.dmp
      Filesize

      20KB

    • memory/2036-39-0x000000001D1A0000-0x000000001D1B8000-memory.dmp
      Filesize

      96KB

    • memory/2036-42-0x000000001E8C0000-0x000000001E8DC000-memory.dmp
      Filesize

      112KB