Analysis
- max time kernel
11s - max time network
151s - platform
windows10_x64 - resource
win10v20210410 - submitted
09/08/2021, 18:45
General
- Target 1ebf2aa3579c344a377d33b54fb99545.exe
- Size 616KB
- Sample210809-cdvltqjywe
- SHA256 a1b3889d5188f03e432c1a423e1df600bccfc706351078e0d70adcf28056f956
Score
10/10
Malware Config
Signatures
- suricata: ET MALWARE AutoHotkey Downloader Checkin via IPLogger
suricata: ET MALWARE AutoHotkey Downloader Checkin via IPLogger
- Legitimate hosting services abused for malware hosting/C2 1 TTPs
- Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
Processes
-
C:\Users\Admin\AppData\Local\Temp\1ebf2aa3579c344a377d33b54fb99545.exe"C:\Users\Admin\AppData\Local\Temp\1ebf2aa3579c344a377d33b54fb99545.exe"1⤵
- Checks processor information in registry
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1696-115-0x0000000000400000-0x0000000002CD0000-memory.dmp
memory/1696-114-0x0000000004960000-0x0000000004A2C000-memory.dmp