Analysis
-
max time kernel
151s -
max time network
173s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
07-11-2022 07:15
Static task
static1
Behavioral task
behavioral1
Sample
abb461c9293b8085242b31029f4aeeec38a0c469a3d4f1bc7b8601dc5b90c31f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
abb461c9293b8085242b31029f4aeeec38a0c469a3d4f1bc7b8601dc5b90c31f.exe
Resource
win10v2004-20220812-en
General
-
Target
abb461c9293b8085242b31029f4aeeec38a0c469a3d4f1bc7b8601dc5b90c31f.exe
-
Size
385KB
-
MD5
667516f3a184f164a0758f2572571254
-
SHA1
5e7c1b3123fbef064d585037a841c5245677ae61
-
SHA256
abb461c9293b8085242b31029f4aeeec38a0c469a3d4f1bc7b8601dc5b90c31f
-
SHA512
da8f56bd33c8a08576f066278d165efcbc67a6182015c4fb7d5405886cc7b702fb64ef3451b2dcacb650161b130a2c6083cd0cfb97b14d62876e3686ecfbdea0
-
SSDEEP
12288:SCROxGUN562WbIoOma4KReVWdVwRagjzn5a:bZew2GIegwRaIA
Malware Config
Signatures
-
OnlyLogger
A tiny loader that uses IPLogger to get its payload.
-
OnlyLogger payload 2 IoCs
Processes:
resource yara_rule behavioral1/memory/940-57-0x0000000000220000-0x000000000024F000-memory.dmp family_onlylogger behavioral1/memory/940-58-0x0000000000400000-0x000000000088F000-memory.dmp family_onlylogger
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/940-54-0x00000000009B8000-0x00000000009D4000-memory.dmpFilesize
112KB
-
memory/940-55-0x00000000756B1000-0x00000000756B3000-memory.dmpFilesize
8KB
-
memory/940-57-0x0000000000220000-0x000000000024F000-memory.dmpFilesize
188KB
-
memory/940-56-0x00000000009B8000-0x00000000009D4000-memory.dmpFilesize
112KB
-
memory/940-58-0x0000000000400000-0x000000000088F000-memory.dmpFilesize
4.6MB
-
memory/940-59-0x00000000009B8000-0x00000000009D4000-memory.dmpFilesize
112KB