Analysis
- max time kernel
9s - max time network
166s - platform
windows7_x64 - resource
win7v20210408 - submitted
09/08/2021, 18:45
General
- Target 1ebf2aa3579c344a377d33b54fb99545.exe
- Size 616KB
- Sample210809-cdvltqjywe
- SHA256 a1b3889d5188f03e432c1a423e1df600bccfc706351078e0d70adcf28056f956
Score
10/10
Malware Config
Signatures
- suricata: ET MALWARE AutoHotkey Downloader Checkin via IPLogger
suricata: ET MALWARE AutoHotkey Downloader Checkin via IPLogger
- Legitimate hosting services abused for malware hosting/C2 1 TTPs
- Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
Processes
-
C:\Users\Admin\AppData\Local\Temp\1ebf2aa3579c344a377d33b54fb99545.exe"C:\Users\Admin\AppData\Local\Temp\1ebf2aa3579c344a377d33b54fb99545.exe"1⤵
- Checks processor information in registry
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
memory/468-59-0x0000000075051000-0x0000000075053000-memory.dmp
memory/468-60-0x0000000000280000-0x000000000034C000-memory.dmp
memory/468-61-0x0000000000400000-0x0000000002CD0000-memory.dmp