Analysis

  • max time kernel
    152s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220414-en
  • submitted
    15-05-2022 01:52

General

  • Target

    new.exe

  • Size

    1.8MB

  • MD5

    c25b27c51ffe1d0d36dc2bc0e3a09896

  • SHA1

    35195363915780a480e826737dbf301c1b276f7e

  • SHA256

    b1356a59ad7142d3cbfdffded37e25deb92de17f9c11fea2c4ab008b37cc41e2

  • SHA512

    41bc36e5e6853c83bd257019cedf4dbb11ad33592b6b613a121ca93c6dfa3db17e3c8b41e081c80b867b999d0b211fd9fbbce71f45a09164ec94daec2be7d99f

Score
10/10

Malware Config

Signatures

  • OnlyLogger

    A tiny loader that uses IPLogger to get its payload.

  • OnlyLogger Payload 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\new.exe
    "C:\Users\Admin\AppData\Local\Temp\new.exe"
    1⤵
      PID:3640

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3640-130-0x0000000000400000-0x00000000005DC000-memory.dmp

      Filesize

      1.9MB

    • memory/3640-131-0x0000000000829000-0x0000000000845000-memory.dmp

      Filesize

      112KB

    • memory/3640-132-0x00000000007C0000-0x00000000007F0000-memory.dmp

      Filesize

      192KB

    • memory/3640-133-0x0000000000400000-0x00000000005DC000-memory.dmp

      Filesize

      1.9MB