56e6b8d79a430a7897dd34778ca8c8dacf3d494439789d6bab62a4c0c6135edc | Triage

Analysis

max time kernel
51s
max time network
66s
platform
windows10-2004_x64
resource
win10v2004-20220721-en
resource tags

arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system
submitted
25-07-2022 01:21

Sharing

Report Analysis Logs

General

Target

56e6b8d79a430a7897dd34778ca8c8dacf3d494439789d6bab62a4c0c6135edc.exe
Size

1.3MB
MD5

3998917b549a68d1f8cc8e4680cf6d31
SHA1

db4abca80947a42770f0d8e5a50192f32152f1a5
SHA256

56e6b8d79a430a7897dd34778ca8c8dacf3d494439789d6bab62a4c0c6135edc
SHA512

d01f4ed481fe474f744c4e0af06d6233e46b27325551ce6a2de38b5feebf2f2af0cb51753570742e7fed750e62aa8edb002a4b8d8b54de9f938f00cb76b9b802

Score

10^/10

suricata

Malware Config

Signatures

suricata: ET MALWARE ETag HTTP Header Observed at JPCERT Sinkhole
suricata: ET MALWARE ETag HTTP Header Observed at JPCERT Sinkhole
suricata

Drops file in Windows directory 1 IoCs

Processes:

56e6b8d79a430a7897dd34778ca8c8dacf3d494439789d6bab62a4c0c6135edc.exe

description	ioc	process
File created	C:\Windows\Tasks\Bidaily Synchronize Task[973b].job	56e6b8d79a430a7897dd34778ca8c8dacf3d494439789d6bab62a4c0c6135edc.exe

C:\Users\Admin\AppData\Local\Temp\56e6b8d79a430a7897dd34778ca8c8dacf3d494439789d6bab62a4c0c6135edc.exe
"C:\Users\Admin\AppData\Local\Temp\56e6b8d79a430a7897dd34778ca8c8dacf3d494439789d6bab62a4c0c6135edc.exe"
1⤵
- Drops file in Windows directory
PID:2212

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2212-130-0x00000000045A0000-0x00000000045CF000-memory.dmp

Filesize
188KB

Download