Resubmissions

11/12/2024, 18:37 UTC

241211-w9f3rstpez 10

11/12/2024, 18:28 UTC

241211-w4jayatnat 10

Analysis

  • max time kernel
    100s
  • max time network
    102s
  • platform
    windows10-ltsc 2021_x64
  • resource
    win10ltsc2021-20241211-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20241211-enlocale:en-usos:windows10-ltsc 2021-x64system
  • submitted
    11/12/2024, 18:28 UTC

General

  • Target

    ExecAction.exe

  • Size

    19KB

  • MD5

    519310853c0ee273a3f8787d7518dd2e

  • SHA1

    22c4e25c4c4c2b5654d05cd6a1e737c6bcb588d8

  • SHA256

    a23c852d3ed4148044708925e56e17246cdb88d6ecaaa375503fa1f915ba1272

  • SHA512

    30e51202416ab2d0bac9cd294d08c12d7973e75696283b1823c6442033698f85075d14dcd79fb1f56886f4491981b1e278d3a506e5e458a1eee6bb372d5e683d

  • SSDEEP

    192:ZsCrRJUlWDSnYe+PjPxucwwSoDvucwwfih5H0JOqxEV1a//bZ28WhTEn:GGOZnYPLxoAjo4S+JNY1cAhhY

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\ExecAction.exe
    "C:\Users\Admin\AppData\Local\Temp\ExecAction.exe"
    1⤵
      PID:1080

    Network

    • flag-us
      DNS
      19.229.111.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      19.229.111.52.in-addr.arpa
      IN PTR
      Response
    No results found
    • 8.8.8.8:53
      19.229.111.52.in-addr.arpa
      dns
      72 B
      158 B
      1
      1

      DNS Request

      19.229.111.52.in-addr.arpa

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1080-0-0x00007FFEE0363000-0x00007FFEE0365000-memory.dmp

      Filesize

      8KB

    • memory/1080-1-0x0000000000AB0000-0x0000000000AB8000-memory.dmp

      Filesize

      32KB

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.