Analysis
-
max time kernel
151s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 19:05
Static task
static1
Behavioral task
behavioral1
Sample
189b68fa456093b7facd8f26e557eb925be4a7055ba44fade660eb8bde9544f2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
189b68fa456093b7facd8f26e557eb925be4a7055ba44fade660eb8bde9544f2.exe
Resource
win10v2004-20220812-en
General
-
Target
189b68fa456093b7facd8f26e557eb925be4a7055ba44fade660eb8bde9544f2.exe
-
Size
22KB
-
MD5
5bd1d3cf661478e7d73be21d2ed78a35
-
SHA1
6eec221c582452a08f1d6ae1b7297ff97589a2b7
-
SHA256
189b68fa456093b7facd8f26e557eb925be4a7055ba44fade660eb8bde9544f2
-
SHA512
483120d17e9ba9a7271320f76b5240fa8ef67a8743c56932f9c5cdf74769ca95ec3f41d2c84ea4249752f4db31273d5ecc8b47ceb8d132985ae82922afe33079
-
SSDEEP
384:Z6wrlWm3HXxwamc+K/K3AwudRcmk5wBAx2zm7DZOaOdqnWTyU33Ur:Z1WGXx+c+K/9cB55GuMXdXT733Ur
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
Processes:
vabdau.exepid process 5044 vabdau.exe -
Drops file in Windows directory 2 IoCs
Processes:
189b68fa456093b7facd8f26e557eb925be4a7055ba44fade660eb8bde9544f2.exedescription ioc process File opened for modification C:\Windows\vabdau.exe 189b68fa456093b7facd8f26e557eb925be4a7055ba44fade660eb8bde9544f2.exe File created C:\Windows\vabdau.exe 189b68fa456093b7facd8f26e557eb925be4a7055ba44fade660eb8bde9544f2.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\189b68fa456093b7facd8f26e557eb925be4a7055ba44fade660eb8bde9544f2.exe"C:\Users\Admin\AppData\Local\Temp\189b68fa456093b7facd8f26e557eb925be4a7055ba44fade660eb8bde9544f2.exe"1⤵
- Drops file in Windows directory
PID:2264
-
C:\Windows\vabdau.exeC:\Windows\vabdau.exe1⤵
- Executes dropped EXE
PID:5044
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
22KB
MD55bd1d3cf661478e7d73be21d2ed78a35
SHA16eec221c582452a08f1d6ae1b7297ff97589a2b7
SHA256189b68fa456093b7facd8f26e557eb925be4a7055ba44fade660eb8bde9544f2
SHA512483120d17e9ba9a7271320f76b5240fa8ef67a8743c56932f9c5cdf74769ca95ec3f41d2c84ea4249752f4db31273d5ecc8b47ceb8d132985ae82922afe33079
-
Filesize
22KB
MD55bd1d3cf661478e7d73be21d2ed78a35
SHA16eec221c582452a08f1d6ae1b7297ff97589a2b7
SHA256189b68fa456093b7facd8f26e557eb925be4a7055ba44fade660eb8bde9544f2
SHA512483120d17e9ba9a7271320f76b5240fa8ef67a8743c56932f9c5cdf74769ca95ec3f41d2c84ea4249752f4db31273d5ecc8b47ceb8d132985ae82922afe33079