Analysis
-
max time kernel
82s -
max time network
80s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
01-07-2022 17:21
General
-
Target
019.exe
-
Size
394KB
-
MD5
2f477a101993494134f15b374d748236
-
SHA1
d61be834d58bb6ea5798b47cb0234febec7dc565
-
SHA256
5ba9f6f64a7cdacdebe7114d12b1740b3f90540b63bd893176281b77bc49b337
-
SHA512
a02a0a145deb0cc3445bdee40f942e52bf0c872d7238000f9e39b24fc8107dff6f07796fbf7342cae197e4f32f4565fab007ad99846501007869c49c0ec44644
Score
10/10
Malware Config
Signatures
-
OnlyLogger
A tiny loader that uses IPLogger to get its payload.
-
OnlyLogger Payload 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\019.exe"C:\Users\Admin\AppData\Local\Temp\019.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/4192-130-0x0000000000400000-0x0000000000464000-memory.dmpFilesize
400KB
-
memory/4192-131-0x00000000006E9000-0x0000000000705000-memory.dmpFilesize
112KB
-
memory/4192-132-0x0000000000640000-0x0000000000670000-memory.dmpFilesize
192KB
-
memory/4192-133-0x0000000000400000-0x0000000000464000-memory.dmpFilesize
400KB
-
memory/4192-134-0x0000000000400000-0x0000000000464000-memory.dmpFilesize
400KB
-
memory/4192-135-0x00000000006E9000-0x0000000000705000-memory.dmpFilesize
112KB
-
memory/4192-136-0x0000000000640000-0x0000000000670000-memory.dmpFilesize
192KB