Resubmissions

24-02-2022 17:24

220224-vyz6tsddd7 10

06-01-2022 16:04

220106-tjcxbabdc5 10

04-01-2022 17:49

220104-weamhahffp 1

Analysis

  • max time kernel
    121s
  • max time network
    179s
  • platform
    windows10_x64
  • resource
    win10-en-20211208
  • submitted
    04-01-2022 17:49

General

  • Target

    28d7e6fe31dc00f82cb032ba29aad6429837ba5efb83c2ce4d31d565896e1169.exe

  • Size

    2.9MB

  • MD5

    0b6ef1e650df35e2d04c56ebfcceabc7

  • SHA1

    5c6ca5581a04955d8e4d1fa452621fbc922ecb7b

  • SHA256

    28d7e6fe31dc00f82cb032ba29aad6429837ba5efb83c2ce4d31d565896e1169

  • SHA512

    3533d35da9ac8956c6c76611747ff153fee5281ee6ea3a67c6a04e833433afefcb592568b8adf8d402ae531ecce2a90adc5a46eff5e5093bfdb03a7956a8e13c

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\28d7e6fe31dc00f82cb032ba29aad6429837ba5efb83c2ce4d31d565896e1169.exe
    "C:\Users\Admin\AppData\Local\Temp\28d7e6fe31dc00f82cb032ba29aad6429837ba5efb83c2ce4d31d565896e1169.exe"
    1⤵
      PID:2780

    Network

    • flag-us
      DNS
      time.windows.com
      Remote address:
      8.8.8.8:53
      Request
      time.windows.com
      IN A
      Response
      time.windows.com
      IN CNAME
      twc.trafficmanager.net
      twc.trafficmanager.net
      IN A
      20.101.57.9
    No results found
    • 8.8.8.8:53
      time.windows.com
      dns
      62 B
      114 B
      1
      1

      DNS Request

      time.windows.com

      DNS Response

      20.101.57.9

    • 20.101.57.9:123
      time.windows.com
      ntp
      76 B
      1

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.