Resubmissions

02-06-2022 17:00

220602-vhy9lacecp 10

12-05-2022 11:22

220512-ngjn7acee6 8

Analysis

  • max time kernel
    146s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220414-en
  • submitted
    02-06-2022 17:00

General

  • Target

    011c781cef00e6451e27af18a558c3b12fef80f9f49355add6f02b5f900a3e82.exe

  • Size

    4.1MB

  • MD5

    92c314b7692cb2b64512750ad7b3d1b4

  • SHA1

    a9a80722656e7a40fac99cc7eca2956e234e70c2

  • SHA256

    011c781cef00e6451e27af18a558c3b12fef80f9f49355add6f02b5f900a3e82

  • SHA512

    5bb574b1651d4513b3c1e472861ec8b5ef12decab195affa0d5fa7ce4e8e4fa7c4fb0f79aad0676adc31f1fbac6a3eae3a2eb798137e8357e81cd700f15c2668

Score
10/10

Malware Config

Signatures

  • Detect Nerbian RAT malware 2 IoCs
  • Nerbian

    Remote access trojan written in the Golang.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\011c781cef00e6451e27af18a558c3b12fef80f9f49355add6f02b5f900a3e82.exe
    "C:\Users\Admin\AppData\Local\Temp\011c781cef00e6451e27af18a558c3b12fef80f9f49355add6f02b5f900a3e82.exe"
    1⤵
      PID:2300

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2300-130-0x0000000000A10000-0x0000000001217000-memory.dmp

      Filesize

      8.0MB

    • memory/2300-131-0x0000000000A10000-0x0000000001217000-memory.dmp

      Filesize

      8.0MB