5674b9161e9a7ef4983670e64d78966c36761d1593207855dc34e011a0be48f8 | Triage

Analysis

max time kernel
51s
max time network
54s
platform
windows10-2004_x64
resource
win10v2004-20220722-en
resource tags

arch:x64arch:x86image:win10v2004-20220722-enlocale:en-usos:windows10-2004-x64system
submitted
25-07-2022 03:13

Sharing

Report Analysis Logs

General

Target

5674b9161e9a7ef4983670e64d78966c36761d1593207855dc34e011a0be48f8.exe
Size

309KB
MD5

396a50aafb8a0a6f6f2e3ab7a984f0e5
SHA1

b060879f5b4874995359325e89744b8407c7ee8d
SHA256

5674b9161e9a7ef4983670e64d78966c36761d1593207855dc34e011a0be48f8
SHA512

835aded12c884f2629ce910a76aea176410eb2d0404ed73d4b22f959affb3cbca10881ff7f036094ecdf7a1c3ac587b9475fd1c2f03c058f4abc02b52fb55823

Score

10^/10

suricata

Malware Config

Signatures

suricata: ET MALWARE ETag HTTP Header Observed at JPCERT Sinkhole
suricata: ET MALWARE ETag HTTP Header Observed at JPCERT Sinkhole
suricata
Drops file in Windows directory 1 IoCs

Processes:

5674b9161e9a7ef4983670e64d78966c36761d1593207855dc34e011a0be48f8.exe

description ioc process

File created C:\Windows\Tasks\Scientifix.job 5674b9161e9a7ef4983670e64d78966c36761d1593207855dc34e011a0be48f8.exe

C:\Users\Admin\AppData\Local\Temp\5674b9161e9a7ef4983670e64d78966c36761d1593207855dc34e011a0be48f8.exe
"C:\Users\Admin\AppData\Local\Temp\5674b9161e9a7ef4983670e64d78966c36761d1593207855dc34e011a0be48f8.exe"
1⤵
- Drops file in Windows directory
PID:1876

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1876-132-0x0000000001A50000-0x0000000001A7F000-memory.dmp

Filesize
188KB

Download