Overview

overview

10

Static

static

b75e1391fc...1f.exe

windows7_x64

10

b75e1391fc...1f.exe

windows10-2004_x64

10

Analysis

  • max time kernel
    148s
  • max time network
    166s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220414-en
  • submitted
    21-05-2022 01:46

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    b75e1391fcb558e42cc05399fa716829114323e1d01aa284445955548302d71f.exe

  • Size

    241KB

  • MD5

    23c77075baf7c9ba4e669239a7e1ab4c

  • SHA1

    014421bdb1ea105a6df0c27fc114819ff3637704

  • SHA256

    b75e1391fcb558e42cc05399fa716829114323e1d01aa284445955548302d71f

  • SHA512

    08de7c9228f277fff346c6cdcfc1b27588772339c5be54960e3a16cfb7c4295dd9f87d1a62c02d1805618c939ef66923f5cd86de5c0b6e4e7a2c1a344ab083ab

Score
10/10
suricata

Malware Config

Signatures

  • suricata: ET MALWARE Possible TA410 APT FlowCloud Dependency Download

    suricata: ET MALWARE Possible TA410 APT FlowCloud Dependency Download

    suricata
  • suricata: ET MALWARE TA410 APT FlowCloud Dependency Download M1

    suricata: ET MALWARE TA410 APT FlowCloud Dependency Download M1

    suricata
  • suricata: ET MALWARE TA410 APT FlowCloud Dependency Download M2

    suricata: ET MALWARE TA410 APT FlowCloud Dependency Download M2

    suricata
  • suricata: ET MALWARE TA410 APT FlowCloud Dependency Download M3

    suricata: ET MALWARE TA410 APT FlowCloud Dependency Download M3

    suricata
  • suricata: ET MALWARE TA410 APT FlowCloud Dependency Download M4

    suricata: ET MALWARE TA410 APT FlowCloud Dependency Download M4

    suricata
  • Drops file in Windows directory 16 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b75e1391fcb558e42cc05399fa716829114323e1d01aa284445955548302d71f.exe
    "C:\Users\Admin\AppData\Local\Temp\b75e1391fcb558e42cc05399fa716829114323e1d01aa284445955548302d71f.exe"
    1⤵
    • Drops file in Windows directory
    PID:5004

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/5004-130-0x0000000010000000-0x00000000100A8000-memory.dmp

    Filesize

    672KB

    Download