Resubmissions

05-05-2022 16:22

220505-tt9c9sbafn 3

05-05-2022 16:08

220505-tlkd6sgch8 4

05-05-2022 16:06

220505-tj3sqsgch7 3

Analysis

  • max time kernel
    52s
  • max time network
    181s
  • platform
    windows10_x64
  • resource
    win10-20220414-en
  • submitted
    05-05-2022 16:06

General

  • Target

    GeoNetUpdateUtility.exe

  • Size

    2.5MB

  • MD5

    e3737d25abae0e870989400992d6ffc3

  • SHA1

    42af6647b43ef7d8e2b9ca6206ede15574529472

  • SHA256

    8dfd41e79ac728f1a6d988b8a73ea8f5a0a99868ad05ca33d8d9c69f1fb61e07

  • SHA512

    387baf739848e388b58f7b089295df7df42edc5e78e20b9cfd0f2211eca7ddfcb70f5c789bfac5173b98211e5b1c250ece84a7669eb41c38689d8684f606afbc

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\GeoNetUpdateUtility.exe
    "C:\Users\Admin\AppData\Local\Temp\GeoNetUpdateUtility.exe"
    1⤵
      PID:2392

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2392-118-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-119-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-120-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-121-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-122-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-123-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-124-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-126-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-125-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-127-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-128-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-129-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-130-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-131-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-132-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-133-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-134-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-135-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-136-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-137-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-138-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-139-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-140-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-141-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-142-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-143-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-144-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-145-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-146-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-147-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-148-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-149-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-150-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-151-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-152-0x0000000000550000-0x00000000007E0000-memory.dmp
      Filesize

      2.6MB

    • memory/2392-153-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-154-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-155-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-156-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-157-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-158-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-159-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-160-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-161-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-162-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-163-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-164-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-165-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-166-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-167-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-168-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-169-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-170-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-171-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-172-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-173-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-174-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-175-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-176-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-177-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-178-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-179-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-180-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-181-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-182-0x0000000002B90000-0x0000000002B9A000-memory.dmp
      Filesize

      40KB

    • memory/2392-183-0x0000000005060000-0x000000000510A000-memory.dmp
      Filesize

      680KB

    • memory/2392-184-0x0000000076EA0000-0x000000007702E000-memory.dmp
      Filesize

      1.6MB

    • memory/2392-187-0x0000000005370000-0x00000000053D6000-memory.dmp
      Filesize

      408KB

    • memory/2392-203-0x0000000005F40000-0x0000000005F48000-memory.dmp
      Filesize

      32KB

    • memory/2392-213-0x000000000A6C0000-0x000000000A6F8000-memory.dmp
      Filesize

      224KB