Analysis

  • max time kernel
    32s
  • max time network
    69s
  • platform
    windows7_x64
  • resource
    win7v20210408
  • submitted
    15-05-2021 16:35

General

  • Target

    8cc38b5cfee782b2b146dd991ca3d5569a061d3e6dc9cf603857d1cd07cdba10.exe

  • Size

    553KB

  • MD5

    89bab612c085ee6b1baade1c33d5ce00

  • SHA1

    5f1b9a06f51545726dc832e9b3b2bb1f52c173ef

  • SHA256

    8cc38b5cfee782b2b146dd991ca3d5569a061d3e6dc9cf603857d1cd07cdba10

  • SHA512

    cf258f9efd4e1960714c620c9f794a9b703f5317986391ee6f18ef0025ef96a4c9747836986f432bdb81ba9114dd88fc310bc4546860b3ff3ad96c9cf554317c

Score
6/10

Malware Config

Signatures

  • Looks up external IP address via web service 1 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

Processes

  • C:\Users\Admin\AppData\Local\Temp\8cc38b5cfee782b2b146dd991ca3d5569a061d3e6dc9cf603857d1cd07cdba10.exe
    "C:\Users\Admin\AppData\Local\Temp\8cc38b5cfee782b2b146dd991ca3d5569a061d3e6dc9cf603857d1cd07cdba10.exe"
    1⤵
      PID:364

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/364-59-0x0000000075451000-0x0000000075453000-memory.dmp
      Filesize

      8KB

    • memory/364-60-0x0000000000B10000-0x0000000000B11000-memory.dmp
      Filesize

      4KB