Analysis
-
max time kernel
108s -
max time network
143s -
platform
windows10_x64 -
resource
win10-en-20211014 -
submitted
08-12-2021 09:42
Static task
static1
General
-
Target
617f9d822418a44cac50b28755f2d075fac1c2de21995820912f07f4b4ee8075.exe
-
Size
232KB
-
MD5
fd4e0205ce36f99ff343a78ec3e251bc
-
SHA1
b633df31339acb69f708a41fd227298420fd4036
-
SHA256
617f9d822418a44cac50b28755f2d075fac1c2de21995820912f07f4b4ee8075
-
SHA512
f413a054603bc0bc86d1657e3960c4b691e7900be36e9470a408264cb63ad0eb9d7cea7b83dbfdf7f727ea5c359d7d6ab5b565ab60976735d67f00c5a082f50e
Malware Config
Extracted
Family
systembc
C2
185.209.30.180:4001
Signatures
-
Drops file in Windows directory 2 IoCs
Processes:
617f9d822418a44cac50b28755f2d075fac1c2de21995820912f07f4b4ee8075.exedescription ioc process File created C:\Windows\Tasks\wow64.job 617f9d822418a44cac50b28755f2d075fac1c2de21995820912f07f4b4ee8075.exe File opened for modification C:\Windows\Tasks\wow64.job 617f9d822418a44cac50b28755f2d075fac1c2de21995820912f07f4b4ee8075.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\617f9d822418a44cac50b28755f2d075fac1c2de21995820912f07f4b4ee8075.exe"C:\Users\Admin\AppData\Local\Temp\617f9d822418a44cac50b28755f2d075fac1c2de21995820912f07f4b4ee8075.exe"1⤵
- Drops file in Windows directory
PID:2452
-
C:\Users\Admin\AppData\Local\Temp\617f9d822418a44cac50b28755f2d075fac1c2de21995820912f07f4b4ee8075.exeC:\Users\Admin\AppData\Local\Temp\617f9d822418a44cac50b28755f2d075fac1c2de21995820912f07f4b4ee8075.exe start1⤵PID:2256