c254aaeb0b61033ab46078c13f3e895008eabd8cf9eaa6254ecc8a1e5cef0e06 | Triage

Analysis

max time kernel
11s
max time network
37s
platform
windows11-21h2_x64
resource
win11-20250217-en
resource tags

arch:x64arch:x86image:win11-20250217-enlocale:en-usos:windows11-21h2-x64system
submitted
11/03/2025, 18:35

Sharing

Report Analysis Logs

General

Target

REPO.exe
Size

651KB
MD5

37e2e7e012343ccef500133286fcbf27
SHA1

4b7e66039d04b14ddcfb580a6e6a395ea52222be
SHA256

1643ff9ed131adde7a22363f26d36308b4b4fb8f9ba61e5afce3b6803c5cb302
SHA512

418dcb69e506f42248c00459eb3fa5a576006fead83cb5372e5710a8e95265654c316bbb314e4b8afa69e393a7cdf01219b7e17095d1990ab418f0aed68c687e
SSDEEP

12288:c/744aOD8GVma8Vk2WbYq5qL7Lp4SKpRUzfBI4xa7iKXS:m9aO/Vma72z9KY7BID7iKi

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4052	REPO.exe
4052	REPO.exe

C:\Users\Admin\AppData\Local\Temp\REPO.exe
"C:\Users\Admin\AppData\Local\Temp\REPO.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4052

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:3952

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads