Analysis

  • max time kernel
    142s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220721-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-07-2022 00:48

General

  • Target

    57139649ed40f7af535e279287f708ace824838d2d23ec648ef4435042504a9b.exe

  • Size

    2.0MB

  • MD5

    8f612608a6d6afa1c6c7252fd7141f54

  • SHA1

    814b1915fa91597c506bf7db70cb409a458710a1

  • SHA256

    57139649ed40f7af535e279287f708ace824838d2d23ec648ef4435042504a9b

  • SHA512

    df4a8b8fcf768a5a663907800438b7a24655256f7d98460865beccdc61842264b8344b27dea1512ba8fe3512774814972207d914a8a1e97d57349e79d8378e36

Score
10/10

Malware Config

Signatures

  • suricata: ET MALWARE ETag HTTP Header Observed at JPCERT Sinkhole

    suricata: ET MALWARE ETag HTTP Header Observed at JPCERT Sinkhole

  • Drops file in Windows directory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\57139649ed40f7af535e279287f708ace824838d2d23ec648ef4435042504a9b.exe
    "C:\Users\Admin\AppData\Local\Temp\57139649ed40f7af535e279287f708ace824838d2d23ec648ef4435042504a9b.exe"
    1⤵
    • Drops file in Windows directory
    PID:4968

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4968-130-0x0000000004D80000-0x0000000004DAF000-memory.dmp

    Filesize

    188KB