Analysis
-
max time kernel
45s -
max time network
147s -
platform
windows7_x64 -
resource
win7-20220715-en -
resource tags
-
submitted
25-07-2022 03:45
General
-
Target
5660367d8f80ea44967afd842dd6149887927d73cc56d6f8dc2513646df11f01.exe
-
Size
309KB
-
MD5
5e13c60ded01f1be0fa773e2f9ea59ce
-
SHA1
aa7d5c03ecdb8b5b6ea575bbfd075e8ce34f79d5
-
SHA256
5660367d8f80ea44967afd842dd6149887927d73cc56d6f8dc2513646df11f01
-
SHA512
21a462d364acbdb1211f8d2c67a6884d1f2798cd89fb3456b3cf36af22d33a8b0cf2039019a350b6643e32de29a2f19a7ca0817ee5394b24aea978d220cd9107
Score
10/10
Malware Config
Signatures
-
suricata: ET MALWARE ETag HTTP Header Observed at JPCERT Sinkhole
suricata: ET MALWARE ETag HTTP Header Observed at JPCERT Sinkhole
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in Windows directory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5660367d8f80ea44967afd842dd6149887927d73cc56d6f8dc2513646df11f01.exe"C:\Users\Admin\AppData\Local\Temp\5660367d8f80ea44967afd842dd6149887927d73cc56d6f8dc2513646df11f01.exe"1⤵
- Drops file in Windows directory
Network
MITRE ATT&CK Matrix ATT&CK v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2012-54-0x0000000075791000-0x0000000075793000-memory.dmpFilesize
8KB
-
memory/2012-55-0x0000000000280000-0x00000000002AF000-memory.dmpFilesize
188KB
-
memory/2012-59-0x0000000000200000-0x0000000000233000-memory.dmpFilesize
204KB
-
memory/2012-60-0x0000000000200000-0x0000000000233000-memory.dmpFilesize
204KB