Analysis
-
max time kernel
151s -
max time network
155s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
08-11-2022 07:59
Static task
static1
Behavioral task
behavioral1
Sample
a9e6db79464d9992a31482f0cf46b96a2646bcac70545692fb1e7fd703624486.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a9e6db79464d9992a31482f0cf46b96a2646bcac70545692fb1e7fd703624486.exe
Resource
win10v2004-20220812-en
General
-
Target
a9e6db79464d9992a31482f0cf46b96a2646bcac70545692fb1e7fd703624486.exe
-
Size
358KB
-
MD5
d0cb1bcecc615db6be72c5c68576932e
-
SHA1
c127d890420d9205d3426d3edb5746678d0047cd
-
SHA256
a9e6db79464d9992a31482f0cf46b96a2646bcac70545692fb1e7fd703624486
-
SHA512
38e7df8234ceab44dd77b322526e23174cb69f54dc0eb4c547747ad25f833197cd815609780b5cac0993892a6793564a1ea1daf4c1e57896fe0b714f963e57ca
-
SSDEEP
6144:WYHpe4aM7iXeBPcnRE9LxiLAW+fDqRWrmzuOlHJvXwyCTlOp2K:WL4f2OBPce9LxiT0W8SrpvXwyCTl
Malware Config
Signatures
-
OnlyLogger
A tiny loader that uses IPLogger to get its payload.
-
OnlyLogger payload 3 IoCs
Processes:
resource yara_rule behavioral1/memory/1504-56-0x0000000000220000-0x0000000000264000-memory.dmp family_onlylogger behavioral1/memory/1504-57-0x0000000000400000-0x0000000000484000-memory.dmp family_onlylogger behavioral1/memory/1504-59-0x0000000000400000-0x0000000000484000-memory.dmp family_onlylogger
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1504-54-0x00000000768A1000-0x00000000768A3000-memory.dmpFilesize
8KB
-
memory/1504-55-0x000000000064D000-0x0000000000675000-memory.dmpFilesize
160KB
-
memory/1504-56-0x0000000000220000-0x0000000000264000-memory.dmpFilesize
272KB
-
memory/1504-57-0x0000000000400000-0x0000000000484000-memory.dmpFilesize
528KB
-
memory/1504-58-0x000000000064D000-0x0000000000675000-memory.dmpFilesize
160KB
-
memory/1504-59-0x0000000000400000-0x0000000000484000-memory.dmpFilesize
528KB