Analysis

  • max time kernel
    37s
  • max time network
    50s
  • platform
    windows7_x64
  • resource
    win7-20220718-en
  • resource tags

    arch:x64arch:x86image:win7-20220718-enlocale:en-usos:windows7-x64system
  • submitted
    24-07-2022 21:16

General

  • Target

    5df380b97c8d4bbae30530c1be1fa0807dff4adf35172396261f8d99ea0dd80e.exe

  • Size

    557KB

  • MD5

    bf5f23efae9a37962d68f0b7f1b4a0f1

  • SHA1

    56a5e3c0b6857e0891b49a1d7a5547056429a88b

  • SHA256

    5df380b97c8d4bbae30530c1be1fa0807dff4adf35172396261f8d99ea0dd80e

  • SHA512

    56f50a2dee97563f1486b8045078b45a9689ffb1e2df201afcc76b9eac6aa88becdb01675236185f1934b42f04d05d9c744ecb129eea686ca7e7f4a26fad4377

Score
6/10

Malware Config

Signatures

  • Looks up external IP address via web service 1 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

Processes

  • C:\Users\Admin\AppData\Local\Temp\5df380b97c8d4bbae30530c1be1fa0807dff4adf35172396261f8d99ea0dd80e.exe
    "C:\Users\Admin\AppData\Local\Temp\5df380b97c8d4bbae30530c1be1fa0807dff4adf35172396261f8d99ea0dd80e.exe"
    1⤵
      PID:1420

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1420-54-0x0000000075481000-0x0000000075483000-memory.dmp
      Filesize

      8KB