Analysis
- max time kernel
148s - max time network
150s - platform
windows10_x64 - resource
win10v20201028 - submitted
09/11/2020, 19:55
General
- Target Bhctwmi.exe
- Size 898KB
- Sample201109-dbmj1twav6
- SHA256 3484fffe14e6d045c8a5c568187f686d4479693dadb3fc4631b7d307000b5148
Score
6/10
Malware Config
Signatures
- Legitimate hosting services abused for malware hosting/C2 1 TTPs
- Script User-Agent 1 IoCs
Uses user-agent string associated with script host/environment.
Processes
-
C:\Users\Admin\AppData\Local\Temp\Bhctwmi.exe"C:\Users\Admin\AppData\Local\Temp\Bhctwmi.exe"1⤵