Analysis

  • max time kernel
    4294181s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20220310-en
  • submitted
    12-03-2022 08:35

General

  • Target

    8fc37e469e2cd0e35127f8a8661af6b81d7287c817d67a94271582aab344a488.exe

  • Size

    552KB

  • MD5

    adfda30816b925972a0af0f8b5b427c5

  • SHA1

    469f746b467fc3e6259a4b02314d6a44320a3e49

  • SHA256

    8fc37e469e2cd0e35127f8a8661af6b81d7287c817d67a94271582aab344a488

  • SHA512

    0b5ca8b08c9ee176acd8e65b999eb218f7b0c86c8a42821e5d14e20b572b6e071edf2fe4007815720a46c3bf4807532b3a59769dc6af959707c75b9239824e6f

Score
6/10

Malware Config

Signatures

  • Looks up external IP address via web service 1 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

Processes

  • C:\Users\Admin\AppData\Local\Temp\8fc37e469e2cd0e35127f8a8661af6b81d7287c817d67a94271582aab344a488.exe
    "C:\Users\Admin\AppData\Local\Temp\8fc37e469e2cd0e35127f8a8661af6b81d7287c817d67a94271582aab344a488.exe"
    1⤵
      PID:1984

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1984-54-0x0000000074F21000-0x0000000074F23000-memory.dmp

      Filesize

      8KB

    • memory/1984-55-0x0000000074350000-0x00000000748FB000-memory.dmp

      Filesize

      5.7MB

    • memory/1984-56-0x0000000001FD0000-0x0000000001FD1000-memory.dmp

      Filesize

      4KB

    • memory/1984-57-0x0000000074350000-0x00000000748FB000-memory.dmp

      Filesize

      5.7MB