bdb8f8b2e552917faa44b3cba70c0d7f00a44ea54740db7ee33215eaefd8631b | Triage

Analysis

max time kernel
62s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
18-09-2022 02:31

Sharing

Report Analysis Logs

General

Target

06b67b1bd23ea5e4040ea9442de2e818.exe
Size

228KB
MD5

06b67b1bd23ea5e4040ea9442de2e818
SHA1

c8d71caabd9baf54645b08ad4dbf4f121be7a93c
SHA256

bdb8f8b2e552917faa44b3cba70c0d7f00a44ea54740db7ee33215eaefd8631b
SHA512

9281f4e01eda22c62a21d02ab3db9503a21305d35d53e6b64a4911ba0689c145f696b39a590fa02b6ba7dbe1ddcb403c43afae11babc23d1353fa8aebd9f1371
SSDEEP

6144:1rEIZVOl9nYZEHqfKcXD+tGrXgP159WR:yIml9YfKcH7g1vI

Score

6^/10

Malware Config

Signatures

Drops desktop.ini file(s) 2 IoCs

Processes:

06b67b1bd23ea5e4040ea9442de2e818.exe

description	ioc	process
File created	C:\Windows\assembly\Desktop.ini	06b67b1bd23ea5e4040ea9442de2e818.exe
File opened for modification	C:\Windows\assembly\Desktop.ini	06b67b1bd23ea5e4040ea9442de2e818.exe

Drops file in Windows directory 3 IoCs

Processes:

06b67b1bd23ea5e4040ea9442de2e818.exe

description	ioc	process
File opened for modification	C:\Windows\assembly	06b67b1bd23ea5e4040ea9442de2e818.exe
File created	C:\Windows\assembly\Desktop.ini	06b67b1bd23ea5e4040ea9442de2e818.exe
File opened for modification	C:\Windows\assembly\Desktop.ini	06b67b1bd23ea5e4040ea9442de2e818.exe

C:\Users\Admin\AppData\Local\Temp\06b67b1bd23ea5e4040ea9442de2e818.exe
"C:\Users\Admin\AppData\Local\Temp\06b67b1bd23ea5e4040ea9442de2e818.exe"
1⤵
- Drops desktop.ini file(s)
- Drops file in Windows directory
PID:5048

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/5048-132-0x0000000074A00000-0x0000000074FB1000-memory.dmp

Filesize
5.7MB

Download
memory/5048-133-0x0000000074A00000-0x0000000074FB1000-memory.dmp

Filesize
5.7MB

Download