Analysis
- max time kernel
151s - max time network
154s - platform
windows10-2004_x64 - resource
win10v2004-20220414-en - submitted
15/04/2022, 15:12
Static task
static1
Behavioral task
behavioral1
Sample
69c4ec88f5a494f6525f2beaddfd5fb4bc19b57facc8838fb686ddbc2e4f34b8.exe
Resource
win7-20220414-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
69c4ec88f5a494f6525f2beaddfd5fb4bc19b57facc8838fb686ddbc2e4f34b8.exe
Resource
win10v2004-20220414-en
0 signatures
0 seconds
General
- Target 69c4ec88f5a494f6525f2beaddfd5fb4bc19b57facc8838fb686ddbc2e4f34b8.exe
- Size 151KB
- Sample220415-sk5s2sfbgp
- SHA256 69c4ec88f5a494f6525f2beaddfd5fb4bc19b57facc8838fb686ddbc2e4f34b8
- MD5 fdf6f12b0ff6ef1db7499bec93f9ce1f
- SHA1 fed4bc616236973c6e1d50a526243a0eb493c61c
- SHA512 3ea524fa3c44eab9bb215d9947e1be52f3cf3e31d35e1c96070c9f2e3330827e2b910a07cf82760e4d1cd4f47aaf0e2137ebe7da0c17b3db82b77a098d4b1eed
- MD5 SHA1 SHA512
Score
10/10
Malware Config
Signatures
- OnlyLogger
A tiny loader that uses IPLogger to get its payload.
- OnlyLogger Payload 2 IoCs
resource yara_rule behavioral2/memory/1016-132-0x0000000002220000-0x000000000224E000-memory.dmp family_onlylogger behavioral2/memory/1016-133-0x0000000000400000-0x00000000004DF000-memory.dmp family_onlylogger