Malware Analysis Report

2025-01-02 02:54

Sample ID 200706-je7e9l28s2
Target dfff15bafd692a0fdaba1112db5e45bf833beded493f1f97f4264b175ade1a1c
SHA256 dfff15bafd692a0fdaba1112db5e45bf833beded493f1f97f4264b175ade1a1c
Tags
score
1/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
1/10

SHA256

dfff15bafd692a0fdaba1112db5e45bf833beded493f1f97f4264b175ade1a1c

Threat Level: No (potentially) malicious behavior was detected

The file dfff15bafd692a0fdaba1112db5e45bf833beded493f1f97f4264b175ade1a1c was found to be: No (potentially) malicious behavior was detected.

Malicious Activity Summary

N/A

MITRE ATT&CK

N/A

Analysis: static1

Detonation Overview

Reported

2020-07-06 07:26

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2020-07-06 07:26

Reported

2020-07-06 07:31

Platform

win7

Max time kernel

57s

Max time network

56s

Command Line

"C:\Users\Admin\AppData\Local\Temp\dfff15bafd692a0fdaba1112db5e45bf833beded493f1f97f4264b175ade1a1c.exe"

Signatures

N/A

Processes

C:\Users\Admin\AppData\Local\Temp\dfff15bafd692a0fdaba1112db5e45bf833beded493f1f97f4264b175ade1a1c.exe

"C:\Users\Admin\AppData\Local\Temp\dfff15bafd692a0fdaba1112db5e45bf833beded493f1f97f4264b175ade1a1c.exe"

Network

Country Destination Domain Proto
N/A 239.255.255.250:1900 udp
N/A 239.255.255.250:1900 udp

Files

N/A

Analysis: behavioral2

Detonation Overview

Submitted

2020-07-06 07:26

Reported

2020-07-06 07:31

Platform

win10

Max time kernel

61s

Max time network

113s

Command Line

"C:\Users\Admin\AppData\Local\Temp\dfff15bafd692a0fdaba1112db5e45bf833beded493f1f97f4264b175ade1a1c.exe"

Signatures

N/A

Processes

C:\Users\Admin\AppData\Local\Temp\dfff15bafd692a0fdaba1112db5e45bf833beded493f1f97f4264b175ade1a1c.exe

"C:\Users\Admin\AppData\Local\Temp\dfff15bafd692a0fdaba1112db5e45bf833beded493f1f97f4264b175ade1a1c.exe"

Network

Country Destination Domain Proto
N/A 239.255.255.250:1900 udp
N/A 239.255.255.250:1900 udp
N/A 127.0.0.1:47001 tcp
N/A 10.10.0.255:137 udp
N/A 10.10.0.28:137 udp
N/A 10.10.0.34:137 udp
N/A 10.10.0.13:137 udp
N/A 10.10.0.23:137 udp
N/A 10.10.0.30:137 udp
N/A 10.10.0.32:137 udp
N/A 10.10.0.17:137 udp
N/A 10.10.0.10:137 udp
N/A 10.10.0.40:137 udp

Files

N/A