Analysis

  • max time kernel
    135s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7v20210408
  • submitted
    18-04-2021 22:10

General

  • Target

    60580df56a0acf9033a460559bd5330b.exe

  • Size

    357KB

  • MD5

    60580df56a0acf9033a460559bd5330b

  • SHA1

    5414b1e9da7a8009afaf982b94c5c044a508646d

  • SHA256

    77d58783013a7d18f57937c53e5ac21840df059a8119b47c5c68dbc3a4809013

  • SHA512

    11441237d7536ed0ceaa4ff4457410973261b12d2bcdee70228918b01d97c960f2507a6dcf3e17ae3ab31a0cd3aa421925063818d7a3195ecf9859863ff25600

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\60580df56a0acf9033a460559bd5330b.exe
    "C:\Users\Admin\AppData\Local\Temp\60580df56a0acf9033a460559bd5330b.exe"
    1⤵
      PID:1820

    Network

    MITRE ATT&CK Matrix ATT&CK v6

    Credential Access

    Credentials in Files

    2
    T1081

    Discovery

    Query Registry

    1
    T1012

    Collection

    Data from Local System

    2
    T1005

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1820-60-0x0000000076641000-0x0000000076643000-memory.dmp
      Filesize

      8KB

    • memory/1820-61-0x0000000000220000-0x0000000000258000-memory.dmp
      Filesize

      224KB

    • memory/1820-62-0x0000000000400000-0x0000000000486000-memory.dmp
      Filesize

      536KB