Analysis

  • max time kernel
    36s
  • max time network
    37s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22-07-2024 14:56

General

  • Target

    Domain.zip

  • Size

    840KB

  • MD5

    44181a804c3e38f3c735b1b6efb8d5db

  • SHA1

    e8bc080643287a971690e4e0d9f3b87b348013ba

  • SHA256

    d4c8845ab6a2415b48bf5539f0d912f4d4f61e898e4e1c839c56784aae3631d2

  • SHA512

    ff8ff0d0ab5e049d60b758482d079bab3e7c5e2094358276ec9e448899139e017052d8830c00dea5d900ff069f8a65b0ee9587c5e855c6106f0fbd9e03a418c6

  • SSDEEP

    12288:YaylcKeBSY17yDr0dYT52ryZIDCtq1jp4r/ww0hfcJ+jxIe2/EhkXblJ2h/E:ilSsYMqryHtAayoaxIe2/EOXblJ2h/E

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\Explorer.exe
    C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\Domain.zip
    1⤵
      PID:1260
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
      1⤵
        PID:1600
      • C:\Users\Admin\Desktop\Domain\Domain\bin\rbxcompile.exe
        "C:\Users\Admin\Desktop\Domain\Domain\bin\rbxcompile.exe"
        1⤵
          PID:4136
        • C:\Users\Admin\Desktop\Domain\Domain\bin\rbxcompile.exe
          "C:\Users\Admin\Desktop\Domain\Domain\bin\rbxcompile.exe"
          1⤵
            PID:840
          • C:\Users\Admin\Desktop\Domain\Domain\bin\rbxcompile.exe
            "C:\Users\Admin\Desktop\Domain\Domain\bin\rbxcompile.exe"
            1⤵
              PID:3620
            • C:\Users\Admin\Desktop\Domain\Domain\bin\rbxcompile.exe
              "C:\Users\Admin\Desktop\Domain\Domain\bin\rbxcompile.exe"
              1⤵
                PID:2788
              • C:\Users\Admin\Desktop\Domain\Domain\bin\rbxcompile.exe
                "C:\Users\Admin\Desktop\Domain\Domain\bin\rbxcompile.exe"
                1⤵
                  PID:2424

                Network

                MITRE ATT&CK Matrix

                Replay Monitor

                Loading Replay Monitor...

                Downloads