Analysis
-
max time kernel
71s -
max time network
150s -
platform
windows10-1703_x64 -
resource
win10-20220812-en -
resource tags
arch:x64arch:x86image:win10-20220812-enlocale:en-usos:windows10-1703-x64system -
submitted
31-08-2022 08:33
Behavioral task
behavioral1
Sample
ab971c45e2e31f860ac74d476aee2aeb850a5f4130ca12c6c8110e8c4621aca9.exe
Resource
win10-20220812-en
General
-
Target
ab971c45e2e31f860ac74d476aee2aeb850a5f4130ca12c6c8110e8c4621aca9.exe
-
Size
13KB
-
MD5
89cb56d6ad669a38a4b234508dbaf512
-
SHA1
e2e7d4a326c0d8c2cf0cd419d7be98832c839f26
-
SHA256
ab971c45e2e31f860ac74d476aee2aeb850a5f4130ca12c6c8110e8c4621aca9
-
SHA512
3d70f41b5fd830be9dda88d3484cb68a42f70e736e5f1ebc6b98303c1f67308a00a9df6b04b647b59e1593a0d4f2c87410c1b4940efa363bbc936693115a8c5c
-
SSDEEP
192:6kWjQTlZ1eB+pvdNtj2+SPwHP+Q/ZCv2qwvuCKK76n9bJHOkrUN+k:6kjTlZ02NtvSKP+cZC+qwZPGn9bJrUN
Malware Config
Signatures
-
Drops file in Windows directory 2 IoCs
Processes:
ab971c45e2e31f860ac74d476aee2aeb850a5f4130ca12c6c8110e8c4621aca9.exedescription ioc process File opened for modification C:\Windows\Tasks\wow64.job ab971c45e2e31f860ac74d476aee2aeb850a5f4130ca12c6c8110e8c4621aca9.exe File created C:\Windows\Tasks\wow64.job ab971c45e2e31f860ac74d476aee2aeb850a5f4130ca12c6c8110e8c4621aca9.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\ab971c45e2e31f860ac74d476aee2aeb850a5f4130ca12c6c8110e8c4621aca9.exe"C:\Users\Admin\AppData\Local\Temp\ab971c45e2e31f860ac74d476aee2aeb850a5f4130ca12c6c8110e8c4621aca9.exe"1⤵
- Drops file in Windows directory
-
C:\Users\Admin\AppData\Local\Temp\ab971c45e2e31f860ac74d476aee2aeb850a5f4130ca12c6c8110e8c4621aca9.exeC:\Users\Admin\AppData\Local\Temp\ab971c45e2e31f860ac74d476aee2aeb850a5f4130ca12c6c8110e8c4621aca9.exe start1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/904-120-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/904-121-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/904-122-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/904-123-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/904-124-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/904-125-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/904-126-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/904-127-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/904-128-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/904-129-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/904-130-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/904-131-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/904-132-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/904-133-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/904-134-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/904-135-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/904-136-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/904-137-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/904-138-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/904-139-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/904-140-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/904-141-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/904-142-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/904-143-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/904-144-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/904-145-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/904-146-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/904-147-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/904-148-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/904-149-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/904-150-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/904-151-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/904-152-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/904-153-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/904-154-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/904-155-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/904-156-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/904-157-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/904-158-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/904-159-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/904-160-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/904-161-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/904-162-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/904-164-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/904-163-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/904-166-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/904-165-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/904-167-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/904-168-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/904-169-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/2192-170-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/2192-172-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/2192-171-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/2192-173-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/2192-174-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/2192-175-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/2192-176-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/2192-177-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/2192-178-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/2192-179-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/2192-180-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/2192-181-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/2192-182-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB
-
memory/2192-183-0x0000000077020000-0x00000000771AE000-memory.dmpFilesize
1.6MB