Analysis

  • max time kernel
    136s
  • max time network
    107s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01-09-2024 15:07

General

  • Target

    sfbrename-cli-1.0.0-win64/gdbus.exe

  • Size

    53KB

  • MD5

    c6057866009cafd93a0f5cba916b6e52

  • SHA1

    89a5c92c47e8feefbf2d29829fe0a3129d3d699f

  • SHA256

    63b02b090b3150959e447b20539babd7f5e7d4e971271c21ac2194b54b996195

  • SHA512

    ce8d033f344ccadb68278dbe3ea032a79e6510db178a69950773e81bdbcdb97815c519df16684e681c6662a07c2b92454b0eacd548f3e3aad6a658222b67d540

  • SSDEEP

    768:ha8IlFRWanNOeNkT0pjEiiZg/knWqYvqmwiamlPbY5LFW/H6Z:k8IlFZ1NkejHiZOnaCPbSFW/Hw

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\sfbrename-cli-1.0.0-win64\gdbus.exe
    "C:\Users\Admin\AppData\Local\Temp\sfbrename-cli-1.0.0-win64\gdbus.exe"
    1⤵
      PID:4004

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4004-3-0x00007FFF238D0000-0x00007FFF23927000-memory.dmp

      Filesize

      348KB

    • memory/4004-9-0x00007FFF22610000-0x00007FFF22634000-memory.dmp

      Filesize

      144KB

    • memory/4004-8-0x00007FFF29870000-0x00007FFF2987F000-memory.dmp

      Filesize

      60KB

    • memory/4004-7-0x00007FFF22910000-0x00007FFF2295D000-memory.dmp

      Filesize

      308KB

    • memory/4004-6-0x00007FFF29880000-0x00007FFF29890000-memory.dmp

      Filesize

      64KB

    • memory/4004-5-0x00007FFF12E00000-0x00007FFF12FA4000-memory.dmp

      Filesize

      1.6MB

    • memory/4004-2-0x00007FFF12FB0000-0x00007FFF130FF000-memory.dmp

      Filesize

      1.3MB

    • memory/4004-4-0x00007FFF221F0000-0x00007FFF22309000-memory.dmp

      Filesize

      1.1MB

    • memory/4004-1-0x00007FFF2ABC0000-0x00007FFF2ABE8000-memory.dmp

      Filesize

      160KB

    • memory/4004-0-0x00007FF6A4400000-0x00007FF6A4415000-memory.dmp

      Filesize

      84KB