Analysis
-
max time kernel
37s -
max time network
41s -
platform
windows7_x64 -
resource
win7-20220715-en -
resource tags
arch:x64arch:x86image:win7-20220715-enlocale:en-usos:windows7-x64system -
submitted
25-07-2022 00:13
Static task
static1
Behavioral task
behavioral1
Sample
573c1c82d18d0d19287e4c07ebf88a8dea9b02ab21691448beae61ebd5658135.exe
Resource
win7-20220715-en
Behavioral task
behavioral2
Sample
573c1c82d18d0d19287e4c07ebf88a8dea9b02ab21691448beae61ebd5658135.exe
Resource
win10v2004-20220721-en
General
-
Target
573c1c82d18d0d19287e4c07ebf88a8dea9b02ab21691448beae61ebd5658135.exe
-
Size
342KB
-
MD5
28fedaf5cf20df2c2043ba08cf306bc6
-
SHA1
a50b6656d564ee6d8b3b27905e8a965b083c8c10
-
SHA256
573c1c82d18d0d19287e4c07ebf88a8dea9b02ab21691448beae61ebd5658135
-
SHA512
c074a7d3a34877e16bf6dc8954e9121f8b28e4a6e4348e6e416825fc56a8ea088e57104252f109902447d25b3c685f4cbf6d31d6bcca59f36bbdbf4933535f44
Malware Config
Signatures
-
suricata: ET MALWARE ETag HTTP Header Observed at JPCERT Sinkhole
suricata: ET MALWARE ETag HTTP Header Observed at JPCERT Sinkhole
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in Windows directory 1 IoCs
Processes:
573c1c82d18d0d19287e4c07ebf88a8dea9b02ab21691448beae61ebd5658135.exedescription ioc process File created C:\Windows\Tasks\LifeEvents.job 573c1c82d18d0d19287e4c07ebf88a8dea9b02ab21691448beae61ebd5658135.exe