Overview

overview

10

Static

static

3

ScreamSploit X.exe

windows11-21h2-x64

10

$TEMP/Airline

windows11-21h2-x64

1

$TEMP/Antigua

windows11-21h2-x64

1

$TEMP/Antivirus

windows11-21h2-x64

1

$TEMP/Asin

windows11-21h2-x64

1

$TEMP/Bare

windows11-21h2-x64

1

$TEMP/Bee

windows11-21h2-x64

1

$TEMP/Content

windows11-21h2-x64

1

$TEMP/Coordinator

windows11-21h2-x64

1

$TEMP/Definitions

windows11-21h2-x64

1

$TEMP/Determines

windows11-21h2-x64

1

$TEMP/Digital

windows11-21h2-x64

1

$TEMP/Dim

windows11-21h2-x64

1

$TEMP/Documents

windows11-21h2-x64

1

$TEMP/Efficient

windows11-21h2-x64

1

$TEMP/Exhibits

windows11-21h2-x64

1

$TEMP/Fellow

windows11-21h2-x64

1

$TEMP/Fiction

windows11-21h2-x64

1

$TEMP/Geometry

windows11-21h2-x64

1

$TEMP/Gifts

windows11-21h2-x64

1

$TEMP/Guard

windows11-21h2-x64

1

$TEMP/Income

windows11-21h2-x64

1

$TEMP/Matched

windows11-21h2-x64

1

$TEMP/Metallica

windows11-21h2-x64

1

$TEMP/Mighty

windows11-21h2-x64

1

$TEMP/Nhl

windows11-21h2-x64

1

$TEMP/Pet

windows11-21h2-x64

1

$TEMP/Picnic

windows11-21h2-x64

1

$TEMP/Ps

windows11-21h2-x64

1

$TEMP/Reliability

windows11-21h2-x64

1

$TEMP/Sci

windows11-21h2-x64

1

$TEMP/See

windows11-21h2-x64

1

Analysis

  • max time kernel
    99s
  • max time network
    126s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240709-en
  • resource tags

    arch:x64arch:x86image:win11-20240709-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    15/07/2024, 23:45

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    $TEMP/Guard

  • Size

    22KB

  • MD5

    a01c44952262e8b46393bb8a1aff7799

  • SHA1

    1cc1f9adbdf766f3dfaa3f3174984a508094f9f5

  • SHA256

    31d1a2189d7a7dbbcdbdaff3b465555be194f249519a50d0a8ce5a1ccaf26160

  • SHA512

    461d05e787bfbc07845fbcc523da217ed3c8f122ee7ac444a1fba9c514bfdeed22152bd29e36453e7ce0124c47d4473594a096a107eb47fc919bd555ac1c2ddf

  • SSDEEP

    384:8aqdXE9m/D57OMPJ70YXZg4eVv76AzqmopEitriaIKJ7775i:8amE9w97OUg4eVDqp8VQ7A

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\$TEMP\Guard
    1⤵
      PID:772

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads