Overview

overview

10

Static

static

8

81a4723435...92.exe

windows7_x64

10

81a4723435...92.exe

windows10_x64

10

Analysis

  • max time kernel
    5s
  • max time network
    11s
  • platform
    windows7_x64
  • resource
    win7v20210410
  • submitted
    24-06-2021 12:14

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    81a472343543b6f43b98cc7029073592.exe

  • Size

    760KB

  • MD5

    81a472343543b6f43b98cc7029073592

  • SHA1

    b007b7e0fb9f93f68d6188c052a5580cb74b00cc

  • SHA256

    b9d34d07ecb2676577e1850933f5a83f6f990a37a3f67d83f8adc60d016e736b

  • SHA512

    a5639b05cbc2b689c7144562ae1d2e54a667eb1e3e3253471f9379c7350159cfe18f1e9b115c956c87a419151ff704c4138c2d72df8effb591376aeaf8b00e2e

Score
10/10

Malware Config

Extracted

Credentials

  • Protocol:     ftp
  • Host:
    162.241.135.156
  • Port:
    21
  • Username:
    thewa536
  • Password:
    ma20021978123

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\81a472343543b6f43b98cc7029073592.exe
    "C:\Users\Admin\AppData\Local\Temp\81a472343543b6f43b98cc7029073592.exe"
    1⤵
      PID:1100

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1100-60-0x0000000000400000-0x0000000000652000-memory.dmp

      Filesize

      2.3MB

      Download

    • memory/1100-61-0x0000000000240000-0x0000000000241000-memory.dmp

      Filesize

      4KB

      Download

    • memory/1100-62-0x00000000757D1000-0x00000000757D3000-memory.dmp

      Filesize

      8KB

      Download