Analysis

  • max time kernel
    151s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-11-2022 19:05

General

  • Target

    189b68fa456093b7facd8f26e557eb925be4a7055ba44fade660eb8bde9544f2.exe

  • Size

    22KB

  • MD5

    5bd1d3cf661478e7d73be21d2ed78a35

  • SHA1

    6eec221c582452a08f1d6ae1b7297ff97589a2b7

  • SHA256

    189b68fa456093b7facd8f26e557eb925be4a7055ba44fade660eb8bde9544f2

  • SHA512

    483120d17e9ba9a7271320f76b5240fa8ef67a8743c56932f9c5cdf74769ca95ec3f41d2c84ea4249752f4db31273d5ecc8b47ceb8d132985ae82922afe33079

  • SSDEEP

    384:Z6wrlWm3HXxwamc+K/K3AwudRcmk5wBAx2zm7DZOaOdqnWTyU33Ur:Z1WGXx+c+K/9cB55GuMXdXT733Ur

Score
8/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Drops file in Windows directory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\189b68fa456093b7facd8f26e557eb925be4a7055ba44fade660eb8bde9544f2.exe
    "C:\Users\Admin\AppData\Local\Temp\189b68fa456093b7facd8f26e557eb925be4a7055ba44fade660eb8bde9544f2.exe"
    1⤵
    • Drops file in Windows directory
    PID:2264
  • C:\Windows\vabdau.exe
    C:\Windows\vabdau.exe
    1⤵
    • Executes dropped EXE
    PID:5044

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Windows\vabdau.exe

    Filesize

    22KB

    MD5

    5bd1d3cf661478e7d73be21d2ed78a35

    SHA1

    6eec221c582452a08f1d6ae1b7297ff97589a2b7

    SHA256

    189b68fa456093b7facd8f26e557eb925be4a7055ba44fade660eb8bde9544f2

    SHA512

    483120d17e9ba9a7271320f76b5240fa8ef67a8743c56932f9c5cdf74769ca95ec3f41d2c84ea4249752f4db31273d5ecc8b47ceb8d132985ae82922afe33079

  • C:\Windows\vabdau.exe

    Filesize

    22KB

    MD5

    5bd1d3cf661478e7d73be21d2ed78a35

    SHA1

    6eec221c582452a08f1d6ae1b7297ff97589a2b7

    SHA256

    189b68fa456093b7facd8f26e557eb925be4a7055ba44fade660eb8bde9544f2

    SHA512

    483120d17e9ba9a7271320f76b5240fa8ef67a8743c56932f9c5cdf74769ca95ec3f41d2c84ea4249752f4db31273d5ecc8b47ceb8d132985ae82922afe33079