Analysis
- max time kernel
151s - max time network
141s - platform
windows10-2004_x64 - resource
win10v2004-20220310-en - submitted
19/03/2022, 11:45
General
- Target c50bca08a8e80850ec18d258ff937b7b72a500d9027c730c86b05aa73c938b5d.exe
- Size 2.9MB
- Sample220319-nw3qlshbb7
- SHA256 c50bca08a8e80850ec18d258ff937b7b72a500d9027c730c86b05aa73c938b5d
Score
1/10
Malware Config
Signatures
- Modifies data under HKEY_USERS 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c50bca08a8e80850ec18d258ff937b7b72a500d9027c730c86b05aa73c938b5d.exe"C:\Users\Admin\AppData\Local\Temp\c50bca08a8e80850ec18d258ff937b7b72a500d9027c730c86b05aa73c938b5d.exe"1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k netsvcs -p -s BITS1⤵
- Modifies data under HKEY_USERS
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4704-135-0x000002ACAF5C0000-0x000002ACAF5D0000-memory.dmp
memory/4704-134-0x000002ACAF560000-0x000002ACAF570000-memory.dmp
memory/4704-136-0x000002ACAF980000-0x000002ACAF984000-memory.dmp
memory/4704-137-0x000002ACB1E50000-0x000002ACB1E54000-memory.dmp
memory/4704-138-0x000002ACB1E30000-0x000002ACB1E31000-memory.dmp
memory/4704-139-0x000002ACAF9B0000-0x000002ACAF9B4000-memory.dmp
memory/4704-140-0x000002ACAF9A0000-0x000002ACAF9A1000-memory.dmp
memory/4704-141-0x000002ACAF9A0000-0x000002ACAF9A4000-memory.dmp
memory/4704-142-0x000002ACAF8A0000-0x000002ACAF8A1000-memory.dmp