61c56c08353cf2eeb3d498b61708937f4d17fd4f0eee30138ed3c54a9978c3a2 | Triage

Resubmissions

08-11-2024 15:13

241108-slqqhsvcjl 4

08-11-2024 15:11

241108-skk4msvbqq 4

08-11-2024 14:30

241108-rvgzassrev 8

08-11-2024 14:22

241108-rp3c2stelg 10

Analysis

max time kernel
21s
max time network
26s
platform
windows11-21h2_x64
resource
win11-20241007-en
resource tags

arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
submitted
08-11-2024 15:11

Sharing

Report Analysis Logs

General

Target

AppOnFly Windows VPS & Cloud Gaming.eml
Size

428KB
MD5

fe263d9bd308bc908394eca99554fb0d
SHA1

e7870bea23376f8db3eef956973ad9ba64050b73
SHA256

61c56c08353cf2eeb3d498b61708937f4d17fd4f0eee30138ed3c54a9978c3a2
SHA512

0bcf16d0175fdf12fa468c5a905d78ad888236120ecee0789478e24f7242fc07cf6055b8a721bbe560f22eea0d0f12b5f1d4c0693f6898ff61553704fffdde7d
SSDEEP

3072:nMI1RVRRdjxBV7TYkzPGOPEvwPXcn/E84mSWaed+5vj:nMUBUkzuOL/cnU

Score

1^/10

Malware Config

Signatures

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\AppOnFly Windows VPS & Cloud Gaming.eml"
1⤵
PID:3296

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:2920

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads