Overview

overview

10

Static

static

d093330127...b3.exe

windows7_x64

10

d093330127...b3.exe

windows10-2004_x64

10

Analysis

  • max time kernel
    2s
  • max time network
    4s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220414-en
  • submitted
    06-06-2022 16:14

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    d093330127cd6c30968467a9336881ab023acf4cba757f6dd5ac566b1b2285b3.exe

  • Size

    263KB

  • MD5

    d5fb631f61c85ae433748255e294c6ce

  • SHA1

    edc47ed3f6e91a3c6f61b2e4ff76a60387792712

  • SHA256

    d093330127cd6c30968467a9336881ab023acf4cba757f6dd5ac566b1b2285b3

  • SHA512

    236d640cd926e6b5b306464b259e209b77e6201550345ee75e39fa6233c770b6600131d0ff32c1be753d3e8b333bc902338870ff29541aa07f1939fe182e1af1

Score
10/10
tofseetrojan

Malware Config

Signatures

  • Tofsee

    Backdoor/botnet which carries out malicious activities based on commands from a C2 server.

    trojantofsee

Processes

  • C:\Users\Admin\AppData\Local\Temp\d093330127cd6c30968467a9336881ab023acf4cba757f6dd5ac566b1b2285b3.exe
    "C:\Users\Admin\AppData\Local\Temp\d093330127cd6c30968467a9336881ab023acf4cba757f6dd5ac566b1b2285b3.exe"
    1⤵
      PID:4840

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4840-130-0x0000000003142000-0x0000000003153000-memory.dmp
      Filesize

      68KB

      Download
    • memory/4840-131-0x0000000002F20000-0x0000000002F33000-memory.dmp
      Filesize

      76KB

      Download