Resubmissions

19/08/2024, 05:56

240819-gnaarsxfld 3

19/08/2024, 05:33

240819-f9dpmszfrn 3

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    19/08/2024, 05:56

General

  • Target

    3b6d04d6b629c1bdab4f15b0aa0d1e7792078b21cf876ec4c630243de1b47ac3.exe

  • Size

    1.9MB

  • MD5

    b58881526eeded09ccc7b74f1762fd4d

  • SHA1

    6db356451d79f3ea5ebf76c470be5cd8a225889e

  • SHA256

    3b6d04d6b629c1bdab4f15b0aa0d1e7792078b21cf876ec4c630243de1b47ac3

  • SHA512

    f08f8dd80c2ae21c91206685311ad00521b987efe02a7071af31ed93336f818a7ab876007a46099708900c9fc87f574dcf3297a487c4892ecbb49f0dd14e651e

  • SSDEEP

    49152:kRuI3yRJUKlG1CG5bMMJur8OU/ltm8CSL5:C3LzlUr8O6

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: RenamesItself 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3b6d04d6b629c1bdab4f15b0aa0d1e7792078b21cf876ec4c630243de1b47ac3.exe
    "C:\Users\Admin\AppData\Local\Temp\3b6d04d6b629c1bdab4f15b0aa0d1e7792078b21cf876ec4c630243de1b47ac3.exe"
    1⤵
    • Suspicious behavior: RenamesItself
    PID:1056

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\Kno69C9.tmp.mwahahah

    Filesize

    16B

    MD5

    3fed33130740972898406431a353f4dd

    SHA1

    b49863ab32c8fd4931d84ac5f8a96f36c926393a

    SHA256

    55ea701fc3114b0128a240b33a4085e5027fa8d2e62ced5748b2cbc1a0b8df00

    SHA512

    7b432b2ab86c302a1522244279841d660c28c0fc932f263330affd5c6a9f4a1909e3992a6885a4c0899571b15539b9216a9eb6b4781f6fe74490964db65ee351

  • memory/1056-77-0x0000000000400000-0x0000000000610000-memory.dmp

    Filesize

    2.1MB