Overview

overview

10

Static

static

20a637cd63...b7.exe

windows7_x64

10

20a637cd63...b7.exe

windows10-2004_x64

6

Resubmissions

09-10-2023 22:49

231009-2rt5kagh8t 10

12-06-2022 11:51

220612-n1jtasaden 10

Analysis

  • max time kernel
    154s
  • max time network
    170s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220414-en
  • submitted
    12-06-2022 11:51

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    20a637cd6394c41636133b24d78d52a0e091c8012cee9dbf6c4060656f6c7cb7.exe

  • Size

    65KB

  • MD5

    269de662c8b796f35e614a1aa807d769

  • SHA1

    43f32f0e0d952dba0bc2cb3c0657291f0930ec8a

  • SHA256

    20a637cd6394c41636133b24d78d52a0e091c8012cee9dbf6c4060656f6c7cb7

  • SHA512

    4d99243d079668e08342dc015e8f0749b452fd0ae4a1f7b7d047a1b499289ca6044691641db661f90978082e8262e43bcb6230f9e87e0f7f770d568d9b381009

Score
6/10

Malware Config

Signatures

  • Looks up external IP address via web service 1 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

Processes

  • C:\Users\Admin\AppData\Local\Temp\20a637cd6394c41636133b24d78d52a0e091c8012cee9dbf6c4060656f6c7cb7.exe
    "C:\Users\Admin\AppData\Local\Temp\20a637cd6394c41636133b24d78d52a0e091c8012cee9dbf6c4060656f6c7cb7.exe"
    1⤵
      PID:2824

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2824-130-0x0000000074C10000-0x00000000751C1000-memory.dmp
      Filesize

      5.7MB

      Download
    • memory/2824-131-0x0000000074C10000-0x00000000751C1000-memory.dmp
      Filesize

      5.7MB

      Download
    • memory/2824-132-0x0000000074C10000-0x00000000751C1000-memory.dmp
      Filesize

      5.7MB

      Download