Analysis
-
max time kernel
76s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20220721-en -
resource tags
arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system -
submitted
25-07-2022 03:19
Static task
static1
Behavioral task
behavioral1
Sample
5670d45d49d066d4e6f6c6851a1c0eca078ca90d014fcab464b4ab9c6a07b108.exe
Resource
win7-20220718-en
Behavioral task
behavioral2
Sample
5670d45d49d066d4e6f6c6851a1c0eca078ca90d014fcab464b4ab9c6a07b108.exe
Resource
win10v2004-20220721-en
General
-
Target
5670d45d49d066d4e6f6c6851a1c0eca078ca90d014fcab464b4ab9c6a07b108.exe
-
Size
340KB
-
MD5
4a6141827134bad309b9ca57272afea9
-
SHA1
ee53b4a6e14bba1f44a66b7caad791c667f1d126
-
SHA256
5670d45d49d066d4e6f6c6851a1c0eca078ca90d014fcab464b4ab9c6a07b108
-
SHA512
d0d45005d58426108703d20322639f4379a76803578824d3477d69ae438939e090276dec44694e66c5e9b21f20c30310774094b7fdf78523ef289f1bc438f690
Malware Config
Signatures
-
suricata: ET MALWARE ETag HTTP Header Observed at JPCERT Sinkhole
suricata: ET MALWARE ETag HTTP Header Observed at JPCERT Sinkhole
-
Drops file in Windows directory 1 IoCs
Processes:
5670d45d49d066d4e6f6c6851a1c0eca078ca90d014fcab464b4ab9c6a07b108.exedescription ioc process File created C:\Windows\Tasks\VirusPreventer.job 5670d45d49d066d4e6f6c6851a1c0eca078ca90d014fcab464b4ab9c6a07b108.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2400-130-0x0000000000610000-0x000000000063F000-memory.dmpFilesize
188KB