5caffdc76a562e098c471feaede5693f9ead92d5c6c10fb3951dd1fa6c12d21d | Triage

Analysis

max time kernel
2s
max time network
83s
platform
windows7_x64
resource
win7v20201028
submitted
13-02-2021 11:30

Sharing

Report Analysis Logs

General

Target

updatewin2.exe
Size

274KB
MD5

996ba35165bb62473d2a6743a5200d45
SHA1

52169b0b5cce95c6905873b8d12a759c234bd2e0
SHA256

5caffdc76a562e098c471feaede5693f9ead92d5c6c10fb3951dd1fa6c12d21d
SHA512

2a7fb9bdf8dcf577ac851752f8875a710a3694b99d107c397942fce1392fd99ee0b85f1fddc18c33fba56d7b8fd4dda5f40f28e64d8398e6048c2ab140780634

Score

8^/10

Malware Config

Signatures

Drops file in Drivers directory 1 IoCs

Processes:

updatewin2.exe

description	ioc	Process
File opened for modification	C:\Windows\System32\drivers\etc\hosts	updatewin2.exe

C:\Users\Admin\AppData\Local\Temp\updatewin2.exe
"C:\Users\Admin\AppData\Local\Temp\updatewin2.exe"
1⤵
- Drops file in Drivers directory
PID:296

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/296-2-0x0000000076381000-0x0000000076383000-memory.dmp

Filesize
8KB

Download
memory/296-3-0x0000000001CC0000-0x0000000001CD1000-memory.dmp

Filesize
68KB

Download
memory/296-4-0x0000000000400000-0x0000000000432000-memory.dmp

Filesize
200KB

Download