Analysis
-
max time kernel
130s -
max time network
136s -
platform
windows7_x64 -
resource
win7-20220718-en -
resource tags
-
submitted
24-07-2022 23:22
General
-
Target
5754f46f3074606adde9039539ef43f03e72017018a25f476fe2674a97a6f3f4.exe
-
Size
221KB
-
MD5
86dafa0262bf217f5344a3b057c0db06
-
SHA1
ff02f3f2808cffeeb1e524fc872edbb7016bf628
-
SHA256
5754f46f3074606adde9039539ef43f03e72017018a25f476fe2674a97a6f3f4
-
SHA512
1816acbea1c65dedf494dda5dd0fbd106a50d0aea0c493f88f342d0332d1b4b92c4722cab7874704d116568f447be2745d5b63fdfbd2d56b70266d427d4cac01
Score
10/10
Malware Config
Signatures
-
suricata: ET MALWARE Generic - POST To .php w/Extended ASCII Characters
suricata: ET MALWARE Generic - POST To .php w/Extended ASCII Characters
-
suricata: ET MALWARE Ransomware Locky CnC Beacon 2
suricata: ET MALWARE Ransomware Locky CnC Beacon 2
-
suricata: ET MALWARE Win32/Necurs Common POST Header Structure
suricata: ET MALWARE Win32/Necurs Common POST Header Structure
Processes
-
C:\Users\Admin\AppData\Local\Temp\5754f46f3074606adde9039539ef43f03e72017018a25f476fe2674a97a6f3f4.exe"C:\Users\Admin\AppData\Local\Temp\5754f46f3074606adde9039539ef43f03e72017018a25f476fe2674a97a6f3f4.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1904-54-0x0000000074F01000-0x0000000074F03000-memory.dmpFilesize
8KB
-
memory/1904-55-0x0000000000400000-0x000000000044C000-memory.dmpFilesize
304KB
-
memory/1904-57-0x0000000000400000-0x000000000044C000-memory.dmpFilesize
304KB
-
memory/1904-58-0x00000000003D0000-0x00000000003F1000-memory.dmpFilesize
132KB