56122070a3bdb1f168cbae330d58b9c268700509420d2670ccafd01221b45751 | Triage

Analysis

max time kernel
72s
max time network
78s
platform
windows7_x64
resource
win7-20220715-en
resource tags

arch:x64arch:x86image:win7-20220715-enlocale:en-usos:windows7-x64system
submitted
25-07-2022 05:57

Sharing

Report Analysis Logs

General

Target

files/6.exe
Size

552KB
MD5

713e8df6bd82d3260543d0d969905d5b
SHA1

e0fb35f6f3672d51140dc240ae23e627a4043a0f
SHA256

a100ce0a67c5890bcc38d2b6e30f9164dfe266126ec40a2fd7eb8e941dc7d025
SHA512

47e75a0604ec838992b9e9a552c7727c6902a8b0627b9f254f2ca9ae1fa70f5762895e94e32b40b3a2a1dfe0246043dd4ad4cb983a0bac7546275189c5375953

Score

6^/10

Malware Config

Signatures

Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.

Processes:

flow ioc

4 bot.whatismyipaddress.com

C:\Users\Admin\AppData\Local\Temp\files\6.exe
"C:\Users\Admin\AppData\Local\Temp\files\6.exe"
1⤵
PID:1096

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1096-54-0x0000000074F61000-0x0000000074F63000-memory.dmp

Filesize
8KB

Download
memory/1096-55-0x0000000074050000-0x00000000745FB000-memory.dmp

Filesize
5.7MB

Download
memory/1096-56-0x0000000074050000-0x00000000745FB000-memory.dmp

Filesize
5.7MB

Download
memory/1096-57-0x0000000074050000-0x00000000745FB000-memory.dmp

Filesize
5.7MB

Download