Overview

overview

1

Static

static

28cfd47fd5...7d.exe

windows7-x64

1

28cfd47fd5...7d.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    158s
  • max time network
    172s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/10/2022, 11:50 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    28cfd47fd5fb68570d68018fe85c30350c7adbc2fbd58451feead1f64de5d17d.exe

  • Size

    1.3MB

  • MD5

    64b78b4d0b4ef4d8ad1b0f7f68868ebd

  • SHA1

    509dd03a1c18a5b118ba3969fcdf4b1b5945e165

  • SHA256

    28cfd47fd5fb68570d68018fe85c30350c7adbc2fbd58451feead1f64de5d17d

  • SHA512

    b21f670369aa54bae0f241374cf2282446f052fcb4050365ea6d2c52fd572a8ae054b8666c2c8d86cb5ac15c9fb865a343f321e572cb9a02990620edfe9e831a

  • SSDEEP

    24576:qpfGkpHHwSfNu3sez5AMFVOEwO1Lni2ihn9udbGu5SelMjXiGuvHUoQ:qlGkgNlAOOEf1LnOncAnLjA0oQ

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\28cfd47fd5fb68570d68018fe85c30350c7adbc2fbd58451feead1f64de5d17d.exe
    "C:\Users\Admin\AppData\Local\Temp\28cfd47fd5fb68570d68018fe85c30350c7adbc2fbd58451feead1f64de5d17d.exe"
    1⤵
      PID:1840

    Network

    • flag-us
      DNS
      14.110.152.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      14.110.152.52.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      a.2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.5.0.8.0.0.3.0.1.3.0.6.2.ip6.arpa
      Remote address:
      8.8.8.8:53
      Request
      a.2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.5.0.8.0.0.3.0.1.3.0.6.2.ip6.arpa
      IN PTR
      Response
    • 93.184.221.240:80
      260 B
       5
    • 209.197.3.8:80
      322 B
       7
    • 93.184.221.240:80
      260 B
       5
    • 20.189.173.14:443
      322 B
       7
    • 93.184.221.240:80
      322 B
       7
    • 93.184.221.240:80
      322 B
       7
    • 67.26.111.254:80
      46 B
       40 B
       1
      1
    • 67.26.111.254:80
      46 B
       40 B
       1
      1
    • 8.8.8.8:53
      14.110.152.52.in-addr.arpa
      dns
      72 B
       146 B
       1
      1

      DNS Request

      14.110.152.52.in-addr.arpa

    • 8.8.8.8:53
      a.2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.5.0.8.0.0.3.0.1.3.0.6.2.ip6.arpa
      dns
      118 B
       204 B
       1
      1

      DNS Request

      a.2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.5.0.8.0.0.3.0.1.3.0.6.2.ip6.arpa

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1840-132-0x0000000000400000-0x0000000000431000-memory.dmp

      Filesize

      196KB

      Download

    • memory/1840-133-0x0000000000400000-0x0000000000431000-memory.dmp

      Filesize

      196KB

      Download

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.