Analysis
-
max time kernel
76s -
max time network
77s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system -
submitted
06-09-2024 00:39
Static task
static1
Behavioral task
behavioral1
Sample
XDR_ResponseApp_CollectFile_RM-20240905-00029_3E74B1FB-24EF-4412-A511-2D4EC1D62C00_20240905T031707Z.zip
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
476215-475952.msg
Resource
win10-20240611-en
General
-
Target
XDR_ResponseApp_CollectFile_RM-20240905-00029_3E74B1FB-24EF-4412-A511-2D4EC1D62C00_20240905T031707Z.zip
-
Size
130KB
-
MD5
d3e8334ed6178dcbe257b23604f9b345
-
SHA1
93b147cadb7ab535b88a3a9d49f5eca0e4eb2d2c
-
SHA256
5b23ee2577c8697bb43c621bd39c935c5b0ed190bcfe9252c3fbae4048970c78
-
SHA512
d6c613e983e2a09411f47a3687dac29b922a17621cc0435d1b35dc405461ea8d850befbab0bd0b410dba9fee190a9e7803914830f452a014c7835b2873650874
-
SSDEEP
3072:aSM4SYwR1KevQvvQzmP3esrH7JdCGN6hB+Tubia5LL:7qbz0egHtX6hoTCz3
Malware Config
Signatures
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\XDR_ResponseApp_CollectFile_RM-20240905-00029_3E74B1FB-24EF-4412-A511-2D4EC1D62C00_20240905T031707Z.zip1⤵PID:2316
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:5096