Analysis
- max time kernel
150s - max time network
155s - platform
windows10-2004_x64 - resource
win10v2004-en-20220112 - submitted
07/03/2022, 12:25
General
- Target a55a82496fd7eab918c40496fa2db0067c2f52ca076b1eb18f6d0191590a01d9.exe
- Size 371KB
- Sample220307-plvspahcbr
- SHA256 a55a82496fd7eab918c40496fa2db0067c2f52ca076b1eb18f6d0191590a01d9
Score
10/10
Malware Config
Extracted
Family
-
matanbuchus
C2
-
http://gw397iwauwsf.top/Plugin.triumphdrop
Signatures
- Matanbuchus
A loader sold as MaaS first seen in February 2021.
Processes
-
C:\Users\Admin\AppData\Local\Temp\a55a82496fd7eab918c40496fa2db0067c2f52ca076b1eb18f6d0191590a01d9.exe"C:\Users\Admin\AppData\Local\Temp\a55a82496fd7eab918c40496fa2db0067c2f52ca076b1eb18f6d0191590a01d9.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3160-130-0x00000000032E8000-0x000000000331F000-memory.dmp
memory/3160-131-0x00000000032E8000-0x000000000331F000-memory.dmp
memory/3160-132-0x0000000003230000-0x0000000003293000-memory.dmp
memory/3160-133-0x0000000000400000-0x0000000002FD7000-memory.dmp