4389b1251ea3e361e0240ed4d56f60bae83c990db7ce1dac2ae1d85419fca59b | Triage

Resubmissions

21/06/2022, 17:25 UTC

220621-vzpfqaahc9 1

Analysis

max time kernel
61s
max time network
86s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
21/06/2022, 17:25 UTC

Sharing

Report Analysis Logs

General

Target

6AFC0D7568FB43029BCEE180AE7A98CA.exe
Size

1.2MB
MD5

6afc0d7568fb43029bcee180ae7a98ca
SHA1

c097ec7f579d47e90448d6d3d617c6a8973f507e
SHA256

4389b1251ea3e361e0240ed4d56f60bae83c990db7ce1dac2ae1d85419fca59b
SHA512

53e351b8518805dcb0b762da7b46fa10ceca018c538ffc4abda3913227a489a51b1be102b0718c013bbeebb00741ccde1609fae099e9a76cc3f032a1d901c601

Score

1^/10

Malware Config

Signatures

C:\Users\Admin\AppData\Local\Temp\6AFC0D7568FB43029BCEE180AE7A98CA.exe
"C:\Users\Admin\AppData\Local\Temp\6AFC0D7568FB43029BCEE180AE7A98CA.exe"
1⤵
PID:3720

Network

DNS

pcapp.store

6AFC0D7568FB43029BCEE180AE7A98CA.exe

Remote address:

8.8.8.8:53

Request

pcapp.store

IN A

Response

pcapp.store

IN A

34.195.48.210
DNS

106.89.54.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

106.89.54.20.in-addr.arpa

IN PTR

Response

34.195.48.210:443

pcapp.store

6AFC0D7568FB43029BCEE180AE7A98CA.exe

260 B
5
20.189.173.14:443

322 B
7
104.110.191.140:80

276 B
6

8.8.8.8:53

pcapp.store

dns

6AFC0D7568FB43029BCEE180AE7A98CA.exe

57 B
73 B
1
1

DNS Request

pcapp.store

DNS Response

34.195.48.210
8.8.8.8:53

106.89.54.20.in-addr.arpa

dns

71 B
157 B
1
1

DNS Request

106.89.54.20.in-addr.arpa

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads