Analysis

  • max time kernel
    164s
  • max time network
    173s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/11/2022, 08:34

General

  • Target

    6df88e7b3f0467ac2022529334ea30a84752ea63eb509f27412caa399681ef6c.exe

  • Size

    385KB

  • MD5

    113a87c4f6e9849f457e6bf0ae65f0d0

  • SHA1

    0205fcde1eef0eda457e711011b070fe3408ab09

  • SHA256

    6df88e7b3f0467ac2022529334ea30a84752ea63eb509f27412caa399681ef6c

  • SHA512

    255a6163476555d5dd79c5f0feac57bb8c47804190a4a39728b8fb4dfeca9532b1284eba00ff26dc60c77138c33a98078f67513fad4088301f541abf7bcecbc3

  • SSDEEP

    3072:UfKPw/6Nb8lPtYpDzo83H6JrgboTlyMvXOqms0itTBf28VG:sKP9NCPt8zErgsTlXvXBmJitTBe8VG

Score
7/10

Malware Config

Signatures

  • Unexpected DNS network traffic destination 1 IoCs

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Suspicious behavior: EnumeratesProcesses 40 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6df88e7b3f0467ac2022529334ea30a84752ea63eb509f27412caa399681ef6c.exe
    "C:\Users\Admin\AppData\Local\Temp\6df88e7b3f0467ac2022529334ea30a84752ea63eb509f27412caa399681ef6c.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:3604

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads