56129a81dd7435f22336e5effb1ec8e9122dc891752e7ad995ad70926290d044 | Triage

Analysis

max time kernel
107s
max time network
110s
platform
windows10-2004_x64
resource
win10v2004-20220721-en
resource tags

arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system
submitted
25-07-2022 05:56

Sharing

Report Analysis Logs

General

Target

56129a81dd7435f22336e5effb1ec8e9122dc891752e7ad995ad70926290d044.exe
Size

219KB
MD5

449ed29c7297b3aa6d0e1a5df590dfa2
SHA1

f5701ba8841217eb64c1bdcdf51f3b767b3b447d
SHA256

56129a81dd7435f22336e5effb1ec8e9122dc891752e7ad995ad70926290d044
SHA512

6bff2f0a9e3eafb598241e038cefb1ecc88d8fa6fee9fb4c36e68ecf4f33e8fb30a556964c5d6bdee6f1ad6a0b4cf0f2b7996e26418a8f22fbd32534c654891f

Score

10^/10

suricata

Malware Config

Signatures

suricata: ET MALWARE ETag HTTP Header Observed at JPCERT Sinkhole
suricata: ET MALWARE ETag HTTP Header Observed at JPCERT Sinkhole
suricata
Drops file in Windows directory 1 IoCs

Processes:

56129a81dd7435f22336e5effb1ec8e9122dc891752e7ad995ad70926290d044.exe

description ioc process

File created C:\Windows\Tasks\SociaLite.job 56129a81dd7435f22336e5effb1ec8e9122dc891752e7ad995ad70926290d044.exe

C:\Users\Admin\AppData\Local\Temp\56129a81dd7435f22336e5effb1ec8e9122dc891752e7ad995ad70926290d044.exe
"C:\Users\Admin\AppData\Local\Temp\56129a81dd7435f22336e5effb1ec8e9122dc891752e7ad995ad70926290d044.exe"
1⤵
- Drops file in Windows directory
PID:2180

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2180-130-0x00000000012C0000-0x00000000012EF000-memory.dmp

Filesize
188KB

Download