7d5f9842c34a83780808e990da2eeabbd003a2db7a424de5dda63da6913db603 | Triage

Analysis

max time kernel
20s
max time network
17s
platform
windows10-1703_x64
resource
win10-20240404-en
resource tags

arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
submitted
12/07/2024, 09:12

Sharing

Report Analysis Logs

General

Target

goodbyedpi.exe
Size

73KB
MD5

5a2136bcbc14293b4f88dfba3243dd0a
SHA1

349174de8d042d814bd28b171770391764195f1c
SHA256

331ac6c1d22ba5a0a217f3f27d0d823051869cafc8b8ef7f2002fa2accebc74e
SHA512

c844e5d36dfb52bff7a5c2f9d19530de094f811641d57a35bf7023b5dc9a134a83488f65389c5a9805b7afffd197175e15fae3f67ec3e0dc9d490e60daf693c5
SSDEEP

1536:0DUStjrGshxSrBwzh6E6xdK6aTe0yNgnIcm:0DUCjBhxSrazwqrUgID

Score

1^/10

Malware Config

Signatures

Suspicious behavior: LoadsDriver 1 IoCs

pid	Process
632	Process not Found

C:\Users\Admin\AppData\Local\Temp\goodbyedpi.exe
"C:\Users\Admin\AppData\Local\Temp\goodbyedpi.exe"
1⤵
PID:4768

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4768-0-0x00007FF6ECFC0000-0x00007FF6ECFDB000-memory.dmp

Filesize
108KB

Download
memory/4768-1-0x0000000062800000-0x000000006280D000-memory.dmp

Filesize
52KB

Download
memory/4768-2-0x00007FF6ECFC0000-0x00007FF6ECFDB000-memory.dmp

Filesize
108KB

Download