Analysis
-
max time kernel
82s -
max time network
46s -
platform
windows7_x64 -
resource
win7-20220414-en -
submitted
15-04-2022 15:12
Static task
static1
Behavioral task
behavioral1
Sample
69c4ec88f5a494f6525f2beaddfd5fb4bc19b57facc8838fb686ddbc2e4f34b8.exe
Resource
win7-20220414-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
69c4ec88f5a494f6525f2beaddfd5fb4bc19b57facc8838fb686ddbc2e4f34b8.exe
Resource
win10v2004-20220414-en
0 signatures
0 seconds
General
-
Target
69c4ec88f5a494f6525f2beaddfd5fb4bc19b57facc8838fb686ddbc2e4f34b8.exe
-
Size
151KB
-
MD5
fdf6f12b0ff6ef1db7499bec93f9ce1f
-
SHA1
fed4bc616236973c6e1d50a526243a0eb493c61c
-
SHA256
69c4ec88f5a494f6525f2beaddfd5fb4bc19b57facc8838fb686ddbc2e4f34b8
-
SHA512
3ea524fa3c44eab9bb215d9947e1be52f3cf3e31d35e1c96070c9f2e3330827e2b910a07cf82760e4d1cd4f47aaf0e2137ebe7da0c17b3db82b77a098d4b1eed
Score
10/10
Malware Config
Signatures
-
OnlyLogger
A tiny loader that uses IPLogger to get its payload.
-
OnlyLogger Payload 2 IoCs
resource yara_rule behavioral1/memory/1816-57-0x00000000003C0000-0x00000000003EE000-memory.dmp family_onlylogger behavioral1/memory/1816-58-0x0000000000400000-0x00000000004DF000-memory.dmp family_onlylogger