Overview

overview

10

Static

static

4186675cb6...82.exe

windows7_x64

10

4186675cb6...82.exe

windows10-2004_x64

10

Analysis

  • max time kernel
    39s
  • max time network
    62s
  • platform
    windows7_x64
  • resource
    win7-20220414-en
  • submitted
    08-07-2022 05:28

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    4186675cb6706f9d51167fb0f14cd3f8fcfb0065093f62b10a15f7d9a6c8d982.exe

  • Size

    3.6MB

  • MD5

    5bef35496fcbdbe841c82f4d1ab8b7c2

  • SHA1

    50049556b3406e07347411767d6d01a704b6fee6

  • SHA256

    4186675cb6706f9d51167fb0f14cd3f8fcfb0065093f62b10a15f7d9a6c8d982

  • SHA512

    874424429d6aaac293717ad6d5deadb4227cc5e3c6376bdd362b2f1bee3d28a819c5e9aae991179c6702a0c4fbb7ec5c4a64297b8e9587c3b6cbae0bd0d98225

Score
10/10
suricata

Malware Config

Signatures

  • suricata: ET MALWARE Known Sinkhole Response Kryptos Logic

    suricata: ET MALWARE Known Sinkhole Response Kryptos Logic

    suricata
  • suricata: ET MALWARE W32/WannaCry.Ransomware Killswitch Domain HTTP Request 1

    suricata: ET MALWARE W32/WannaCry.Ransomware Killswitch Domain HTTP Request 1

    suricata

Processes

  • C:\Users\Admin\AppData\Local\Temp\4186675cb6706f9d51167fb0f14cd3f8fcfb0065093f62b10a15f7d9a6c8d982.exe
    "C:\Users\Admin\AppData\Local\Temp\4186675cb6706f9d51167fb0f14cd3f8fcfb0065093f62b10a15f7d9a6c8d982.exe"
    1⤵
      PID:956

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/956-54-0x0000000075DF1000-0x0000000075DF3000-memory.dmp
      Filesize

      8KB

      Download