Analysis
- max time kernel
63s - max time network
170s - platform
windows7_x64 - resource
win7-20220414-en - submitted
03/07/2022, 08:11
General
- Target 3c3a3e87ec02e301b748c730a7c379424e93e6f3bbe2128000b8f33084b7d641.exe
- Size 422KB
- Sample220703-j3srrsbegp
- SHA256 3c3a3e87ec02e301b748c730a7c379424e93e6f3bbe2128000b8f33084b7d641
Score
10/10
Malware Config
Signatures
- OnlyLogger
A tiny loader that uses IPLogger to get its payload.
- OnlyLogger Payload 2 IoCs
- Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
Processes
-
C:\Users\Admin\AppData\Local\Temp\3c3a3e87ec02e301b748c730a7c379424e93e6f3bbe2128000b8f33084b7d641.exe"C:\Users\Admin\AppData\Local\Temp\3c3a3e87ec02e301b748c730a7c379424e93e6f3bbe2128000b8f33084b7d641.exe"1⤵
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
memory/108-54-0x0000000002D98000-0x0000000002DC0000-memory.dmp
memory/108-55-0x0000000075A61000-0x0000000075A63000-memory.dmp
memory/108-56-0x0000000002D98000-0x0000000002DC0000-memory.dmp
memory/108-57-0x0000000000270000-0x00000000002B4000-memory.dmp
memory/108-58-0x0000000000400000-0x0000000002BC3000-memory.dmp
memory/108-59-0x0000000002D98000-0x0000000002DC0000-memory.dmp