Resubmissions

23/08/2024, 16:00

240823-tf47dsteqe 6

23/08/2024, 15:32

240823-sy293sseld 4

23/08/2024, 15:18

240823-sp1d5athqk 8

23/08/2024, 14:12

240823-rjcv7sydnd 7

23/08/2024, 02:33

240823-c17dta1cpd 7

23/08/2024, 02:11

240823-cmbpzszelg 4

23/08/2024, 02:00

240823-ce59mazbnh 4

23/08/2024, 01:37

240823-b1992a1dmm 5

23/08/2024, 01:24

240823-bsm5jazhpp 5

23/08/2024, 00:51

240823-a7p21awhld 6

Analysis

  • max time kernel
    144s
  • max time network
    160s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23/08/2024, 02:33

General

  • Target

    Dxpserver.exe

  • Size

    320KB

  • MD5

    94cff8771cfb016e2443e33678cbf113

  • SHA1

    ebea421f20d8ae61d3b834011494e312a1bfcfdf

  • SHA256

    b4e13c3da352bf0681a540ce234ea0c3be3261bce312ef240977cd9bad0b9fdb

  • SHA512

    e30f7a6d31662f75f9cfcaa205472ee2121178a03662a6cfd615055f8288a08bd458332bba09d6919a860aafbad2e7acbd549cf8955a59ac4865f84a77d23522

  • SSDEEP

    6144:JTJtm76Ahb5t4eWns0PGrOYm6qy+liIZ1x+xrVFZqHfzpDmP1CfSyOdo5i+lClId:hLm76Mb5t4rs0PGrOYm6qy+IIZ1x+xrC

Score
6/10

Malware Config

Signatures

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\Dxpserver.exe
    "C:\Users\Admin\AppData\Local\Temp\Dxpserver.exe"
    1⤵
      PID:3216

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads