5621b95df29437c5882b57d69e44dc1e31ea47916f8bab0350a5bcc8d7d913c5 | Triage

Analysis

max time kernel
132s
max time network
125s
platform
windows10-2004_x64
resource
win10v2004-20220721-en
resource tags

arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system
submitted
25-07-2022 05:31

Sharing

Report Analysis Logs

General

Target

5621b95df29437c5882b57d69e44dc1e31ea47916f8bab0350a5bcc8d7d913c5.exe
Size

298KB
MD5

8300096dcb66224cbd6bdb34b8525417
SHA1

3d935f03559213780d122715f1704cdd4dfe4e06
SHA256

5621b95df29437c5882b57d69e44dc1e31ea47916f8bab0350a5bcc8d7d913c5
SHA512

fc88c6f61098ffb0870040573944cd9285552e45266d3b72f3c6d777b5f9fc31ba7787a682832904612f0f9b1ffd3f7dbb590f7bd8d524a35fa65ae5ab4c4931

Score

10^/10

suricata

Malware Config

Signatures

suricata: ET MALWARE ETag HTTP Header Observed at JPCERT Sinkhole
suricata: ET MALWARE ETag HTTP Header Observed at JPCERT Sinkhole
suricata
Drops file in Windows directory 1 IoCs

Processes:

5621b95df29437c5882b57d69e44dc1e31ea47916f8bab0350a5bcc8d7d913c5.exe

description ioc process

File created C:\Windows\Tasks\RadarTrend.job 5621b95df29437c5882b57d69e44dc1e31ea47916f8bab0350a5bcc8d7d913c5.exe

C:\Users\Admin\AppData\Local\Temp\5621b95df29437c5882b57d69e44dc1e31ea47916f8bab0350a5bcc8d7d913c5.exe
"C:\Users\Admin\AppData\Local\Temp\5621b95df29437c5882b57d69e44dc1e31ea47916f8bab0350a5bcc8d7d913c5.exe"
1⤵
- Drops file in Windows directory
PID:4908

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4908-130-0x0000000000840000-0x0000000000872000-memory.dmp

Filesize
200KB

Download
memory/4908-131-0x0000000000960000-0x000000000098F000-memory.dmp

Filesize
188KB

Download
memory/4908-135-0x0000000000840000-0x0000000000872000-memory.dmp

Filesize
200KB

Download