Analysis

  • max time kernel
    198s
  • max time network
    206s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240709-en
  • resource tags

    arch:x64arch:x86image:win11-20240709-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    25-07-2024 10:07

General

  • Target

    240725-ltj5da1gqn_pw_infected.zip

  • Size

    86KB

  • MD5

    513bd8d5cf5016106675f2efa77d0d40

  • SHA1

    fd89b68b6fc227c19637e6c03768c4148b7b73c6

  • SHA256

    7478bc084c6aec4c5e09b1c0c52fc80786fc204e5aabaca92425291af1d141c2

  • SHA512

    05e53ac731c1959acf515a8eccd14ddc3087896dadb02d009a0e6395c9b7eacb15fedf771b5a5d39135f48e2e3f5fac69e4f20c3ab082944dd9ee81ec05b87f5

  • SSDEEP

    1536:Wq0HSwcqk6Tq6jvG1dMEfkRaReDOzW9KQQwUBV9yawtQWaigeFHXOcp3HNPpwlOI:WnFHTqIWackRa5W9ZQV/wtQWai3tBoMI

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\Explorer.exe
    C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\240725-ltj5da1gqn_pw_infected.zip
    1⤵
      PID:3492
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
      1⤵
        PID:1544
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\Downloads\RequestRemove.bat" "
        1⤵
          PID:32
        • C:\Windows\system32\AUDIODG.EXE
          C:\Windows\system32\AUDIODG.EXE 0x00000000000004D0 0x00000000000004E4
          1⤵
            PID:3440

          Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads