56995312d620081f1d311fd96f5e893799785fd4a948fd7d13c4180353851e60 | Triage

Analysis

max time kernel
143s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20220721-en
resource tags

arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system
submitted
25-07-2022 02:23

Sharing

Report Analysis Logs

General

Target

56995312d620081f1d311fd96f5e893799785fd4a948fd7d13c4180353851e60.exe
Size

182KB
MD5

2cd22f186f4b1dec8962b05719fc8a63
SHA1

920ca4f5281079ea5979d0949e36ae6bf6a67369
SHA256

56995312d620081f1d311fd96f5e893799785fd4a948fd7d13c4180353851e60
SHA512

8ccb821811265f34cd167116090494934cf3ce28b5b2797c1265d40aa21a064d9339682d1efe789d367b583e85cfc9b9b9c31911182d4c5de263b0f8f720612a

Score

10^/10

suricata

Malware Config

Signatures

suricata: ET MALWARE ETag HTTP Header Observed at JPCERT Sinkhole
suricata: ET MALWARE ETag HTTP Header Observed at JPCERT Sinkhole
suricata

Drops file in Windows directory 1 IoCs

Processes:

56995312d620081f1d311fd96f5e893799785fd4a948fd7d13c4180353851e60.exe

description	ioc	process
File created	C:\Windows\Tasks\Bidaily Synchronize Task[973b].job	56995312d620081f1d311fd96f5e893799785fd4a948fd7d13c4180353851e60.exe

C:\Users\Admin\AppData\Local\Temp\56995312d620081f1d311fd96f5e893799785fd4a948fd7d13c4180353851e60.exe
"C:\Users\Admin\AppData\Local\Temp\56995312d620081f1d311fd96f5e893799785fd4a948fd7d13c4180353851e60.exe"
1⤵
- Drops file in Windows directory
PID:3476

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3476-130-0x0000000004C70000-0x0000000004C9F000-memory.dmp

Filesize
188KB

Download
memory/3476-134-0x00000000016E0000-0x0000000001700000-memory.dmp

Filesize
128KB

Download
memory/3476-135-0x00000000016E0000-0x0000000001700000-memory.dmp

Filesize
128KB

Download