Analysis
- max time kernel
140s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-en-20220113 - submitted
07/03/2022, 10:45
General
- Target e2e62b66b447ccb43ecae9ff913dc9eeabf6566004fd0ac9884776c6beae0540.exe
- Size 461KB
- Sample220307-mtm2psdea8
- SHA256 e2e62b66b447ccb43ecae9ff913dc9eeabf6566004fd0ac9884776c6beae0540
Score
10/10
Malware Config
Extracted
Family
-
matanbuchus
C2
-
http://gw397iwauwsf.top/Plugin.triumphdrop
Signatures
- Matanbuchus
A loader sold as MaaS first seen in February 2021.
Processes
-
C:\Users\Admin\AppData\Local\Temp\e2e62b66b447ccb43ecae9ff913dc9eeabf6566004fd0ac9884776c6beae0540.exe"C:\Users\Admin\AppData\Local\Temp\e2e62b66b447ccb43ecae9ff913dc9eeabf6566004fd0ac9884776c6beae0540.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/560-130-0x0000000002330000-0x0000000002367000-memory.dmp
memory/560-131-0x0000000002370000-0x00000000023D3000-memory.dmp
memory/560-132-0x0000000000400000-0x00000000005EF000-memory.dmp