Analysis
-
max time kernel
42s -
max time network
45s -
platform
windows7_x64 -
resource
win7-20220718-en -
resource tags
arch:x64arch:x86image:win7-20220718-enlocale:en-usos:windows7-x64system -
submitted
25-07-2022 04:36
Behavioral task
behavioral1
Sample
c160cb769bfb707ff6767ab01991c4cc108faae8fd550c8691fc95d21365b136.exe
Resource
win7-20220718-en
Behavioral task
behavioral2
Sample
c160cb769bfb707ff6767ab01991c4cc108faae8fd550c8691fc95d21365b136.exe
Resource
win10v2004-20220721-en
General
-
Target
c160cb769bfb707ff6767ab01991c4cc108faae8fd550c8691fc95d21365b136.exe
-
Size
557KB
-
MD5
033c29be1dfc36591fbd7504a226a218
-
SHA1
50ebe18622f19e87bdf2f40d95fbab1872139307
-
SHA256
c160cb769bfb707ff6767ab01991c4cc108faae8fd550c8691fc95d21365b136
-
SHA512
0d2d282b85899054a0ba284203488ed1cca7ef54a5d92d2a3301e15e720edd91837bd5049160cf85b7fa712534bc245fd69c0d8b4672d8c7ef4381b11a6c5d97
Malware Config
Signatures
-
suricata: ET MALWARE Vidar/Arkei/Megumin/Oski Stealer HTTP POST Pattern
suricata: ET MALWARE Vidar/Arkei/Megumin/Oski Stealer HTTP POST Pattern
-
Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
Processes:
flow ioc 4 ip-api.com
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2020-54-0x0000000075BF1000-0x0000000075BF3000-memory.dmpFilesize
8KB