5736ed3148f3e7bac463c2274715aea97c9d9a298e53465ff7a3d775d92cbc76 | Triage

Analysis

max time kernel
52s
max time network
85s
platform
windows10-2004_x64
resource
win10v2004-20220721-en
resource tags

arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system
submitted
25-07-2022 00:20

Sharing

Report Analysis Logs

General

Target

5736ed3148f3e7bac463c2274715aea97c9d9a298e53465ff7a3d775d92cbc76.exe
Size

2.0MB
MD5

7c0d516ad62d7b6335050043818417c4
SHA1

1016bbe6082b3ec155ba1f074a5bc4a9c8ebd1cc
SHA256

5736ed3148f3e7bac463c2274715aea97c9d9a298e53465ff7a3d775d92cbc76
SHA512

60f26be6cefb8eff1db3a266d11386e7fcecf673435ef2f274a5e56438d5723bd39f8809699e92d199a2cca397cd2f8a9f41c3d19362c7145e20cc242e11684a

Score

10^/10

suricata

Malware Config

Signatures

suricata: ET MALWARE ETag HTTP Header Observed at JPCERT Sinkhole
suricata: ET MALWARE ETag HTTP Header Observed at JPCERT Sinkhole
suricata

Drops file in Windows directory 1 IoCs

Processes:

5736ed3148f3e7bac463c2274715aea97c9d9a298e53465ff7a3d775d92cbc76.exe

description	ioc	process
File created	C:\Windows\Tasks\Bidaily Synchronize Task[pr].job	5736ed3148f3e7bac463c2274715aea97c9d9a298e53465ff7a3d775d92cbc76.exe

C:\Users\Admin\AppData\Local\Temp\5736ed3148f3e7bac463c2274715aea97c9d9a298e53465ff7a3d775d92cbc76.exe
"C:\Users\Admin\AppData\Local\Temp\5736ed3148f3e7bac463c2274715aea97c9d9a298e53465ff7a3d775d92cbc76.exe"
1⤵
- Drops file in Windows directory
PID:3320

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3320-130-0x0000000004BF0000-0x0000000004C1F000-memory.dmp

Filesize
188KB

Download