Analysis

  • max time kernel
    4294179s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20220311-en
  • submitted
    14-03-2022 05:28

General

  • Target

    ce6f9c4c6755482d598b0a4b62b975652713fa1c9739ecc22c0bfed87263c258.exe

  • Size

    552KB

  • MD5

    5958757dbe968a0c7bb2551830f894b8

  • SHA1

    20c7fe9673dfe5bd6d5dbc4662a28caf1fdd3190

  • SHA256

    ce6f9c4c6755482d598b0a4b62b975652713fa1c9739ecc22c0bfed87263c258

  • SHA512

    5668f6b3ca36baecb6897edc3a3f00c5a84680bf3e74ac8e6cd36d49ea0fffc10e2a2b4cd2f00a9d3121041441987467196a25a8dcde194a2123253f0fc52cf2

Score
6/10

Malware Config

Signatures

  • Looks up external IP address via web service 1 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

Processes

  • C:\Users\Admin\AppData\Local\Temp\ce6f9c4c6755482d598b0a4b62b975652713fa1c9739ecc22c0bfed87263c258.exe
    "C:\Users\Admin\AppData\Local\Temp\ce6f9c4c6755482d598b0a4b62b975652713fa1c9739ecc22c0bfed87263c258.exe"
    1⤵
      PID:1776

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1776-54-0x0000000075C41000-0x0000000075C43000-memory.dmp

      Filesize

      8KB

    • memory/1776-55-0x0000000074E10000-0x00000000753BB000-memory.dmp

      Filesize

      5.7MB

    • memory/1776-56-0x00000000002F0000-0x00000000002F1000-memory.dmp

      Filesize

      4KB