Analysis
-
max time kernel
0s -
max time network
142s -
platform
windows7_x64 -
resource
win7-20220414-en -
submitted
23-05-2022 16:27
Static task
static1
Behavioral task
behavioral1
Sample
021a38e1421d50fe09927ca136fd3282e11f30a48029ae253ed3ef0a6b62c23c.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
021a38e1421d50fe09927ca136fd3282e11f30a48029ae253ed3ef0a6b62c23c.exe
Resource
win10v2004-20220414-en
General
-
Target
021a38e1421d50fe09927ca136fd3282e11f30a48029ae253ed3ef0a6b62c23c.exe
-
Size
235KB
-
MD5
30f01fd9b8165d8070ae5c28efda32ab
-
SHA1
5d9edd1f5333c924a0b2a47b0a70b56d4994520c
-
SHA256
021a38e1421d50fe09927ca136fd3282e11f30a48029ae253ed3ef0a6b62c23c
-
SHA512
28fc01bee8d75d7214a74f07c29ce520e90f47be1e0835118306d1e4bf21be2da560e90851fec8518ebd3fb6048703683275f227038943a0418dfc1e4986a0ed
Malware Config
Signatures
-
suricata: ET MALWARE Possible Compromised Host AnubisNetworks Sinkhole Cookie Value Snkz
suricata: ET MALWARE Possible Compromised Host AnubisNetworks Sinkhole Cookie Value Snkz
Processes
-
C:\Users\Admin\AppData\Local\Temp\021a38e1421d50fe09927ca136fd3282e11f30a48029ae253ed3ef0a6b62c23c.exe"C:\Users\Admin\AppData\Local\Temp\021a38e1421d50fe09927ca136fd3282e11f30a48029ae253ed3ef0a6b62c23c.exe"1⤵
-
C:\Windows\3807569515906777\winylkb.exeC:\Windows\3807569515906777\winylkb.exe2⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Windows\3807569515906777\winylkb.exeFilesize
235KB
MD530f01fd9b8165d8070ae5c28efda32ab
SHA15d9edd1f5333c924a0b2a47b0a70b56d4994520c
SHA256021a38e1421d50fe09927ca136fd3282e11f30a48029ae253ed3ef0a6b62c23c
SHA51228fc01bee8d75d7214a74f07c29ce520e90f47be1e0835118306d1e4bf21be2da560e90851fec8518ebd3fb6048703683275f227038943a0418dfc1e4986a0ed
-
C:\Windows\3807569515906777\winylkb.exeFilesize
235KB
MD530f01fd9b8165d8070ae5c28efda32ab
SHA15d9edd1f5333c924a0b2a47b0a70b56d4994520c
SHA256021a38e1421d50fe09927ca136fd3282e11f30a48029ae253ed3ef0a6b62c23c
SHA51228fc01bee8d75d7214a74f07c29ce520e90f47be1e0835118306d1e4bf21be2da560e90851fec8518ebd3fb6048703683275f227038943a0418dfc1e4986a0ed
-
\Windows\3807569515906777\winylkb.exeFilesize
235KB
MD530f01fd9b8165d8070ae5c28efda32ab
SHA15d9edd1f5333c924a0b2a47b0a70b56d4994520c
SHA256021a38e1421d50fe09927ca136fd3282e11f30a48029ae253ed3ef0a6b62c23c
SHA51228fc01bee8d75d7214a74f07c29ce520e90f47be1e0835118306d1e4bf21be2da560e90851fec8518ebd3fb6048703683275f227038943a0418dfc1e4986a0ed
-
\Windows\3807569515906777\winylkb.exeFilesize
235KB
MD530f01fd9b8165d8070ae5c28efda32ab
SHA15d9edd1f5333c924a0b2a47b0a70b56d4994520c
SHA256021a38e1421d50fe09927ca136fd3282e11f30a48029ae253ed3ef0a6b62c23c
SHA51228fc01bee8d75d7214a74f07c29ce520e90f47be1e0835118306d1e4bf21be2da560e90851fec8518ebd3fb6048703683275f227038943a0418dfc1e4986a0ed
-
memory/1452-54-0x0000000000D93000-0x0000000000D9A000-memory.dmpFilesize
28KB
-
memory/1452-55-0x0000000075EF1000-0x0000000075EF3000-memory.dmpFilesize
8KB
-
memory/1452-56-0x0000000000D93000-0x0000000000D9A000-memory.dmpFilesize
28KB
-
memory/1452-57-0x0000000000400000-0x0000000000C42000-memory.dmpFilesize
8.3MB
-
memory/1504-60-0x0000000000000000-mapping.dmp
-
memory/1504-62-0x0000000000D13000-0x0000000000D1A000-memory.dmpFilesize
28KB
-
memory/1504-64-0x0000000000D13000-0x0000000000D1A000-memory.dmpFilesize
28KB
-
memory/1504-65-0x0000000000400000-0x0000000000C42000-memory.dmpFilesize
8.3MB