55f89d5ff4ef6c188988b15dafdbd056dd36b5e6a647a354c9c8e038ecf169fc | Triage

Analysis

max time kernel
91s
max time network
125s
platform
windows10-2004_x64
resource
win10v2004-20220721-en
resource tags

arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system
submitted
25-07-2022 06:16

Sharing

Report Analysis Logs

General

Target

55f89d5ff4ef6c188988b15dafdbd056dd36b5e6a647a354c9c8e038ecf169fc.exe
Size

234KB
MD5

07770ac58a5e59c6853067387614447c
SHA1

a28d125e1e53c2571537447d34174f581a71b7d4
SHA256

55f89d5ff4ef6c188988b15dafdbd056dd36b5e6a647a354c9c8e038ecf169fc
SHA512

36bda54c6aba837f87ac8e70c7458b7571313df3db457cf42305a91cc7c5119b6ab1d0230040c56ddc730700bfa87df5282264929925b08c34f699ff51d42346

Score

10^/10

suricata

Malware Config

Signatures

suricata: ET MALWARE ETag HTTP Header Observed at JPCERT Sinkhole
suricata: ET MALWARE ETag HTTP Header Observed at JPCERT Sinkhole
suricata
Drops file in Windows directory 1 IoCs

Processes:

55f89d5ff4ef6c188988b15dafdbd056dd36b5e6a647a354c9c8e038ecf169fc.exe

description ioc process

File created C:\Windows\Tasks\DareToTravel.job 55f89d5ff4ef6c188988b15dafdbd056dd36b5e6a647a354c9c8e038ecf169fc.exe

C:\Users\Admin\AppData\Local\Temp\55f89d5ff4ef6c188988b15dafdbd056dd36b5e6a647a354c9c8e038ecf169fc.exe
"C:\Users\Admin\AppData\Local\Temp\55f89d5ff4ef6c188988b15dafdbd056dd36b5e6a647a354c9c8e038ecf169fc.exe"
1⤵
- Drops file in Windows directory
PID:4552

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4552-130-0x0000000001FE0000-0x00000000020E0000-memory.dmp

Filesize
1024KB

Download
memory/4552-131-0x0000000001540000-0x000000000156F000-memory.dmp

Filesize
188KB

Download