Analysis

  • max time network
    542s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24-11-2022 05:31

Errors

Reason
Reading agent response: Timeout while submitting payload

General

  • Target

    2014_11rechnung_4768955881_pdf_sign_telekom_de_deutschland_gmbh.exe

  • Size

    257KB

  • MD5

    13ad6aabcc3fa5508629b1abdbc35c11

  • SHA1

    66db64ad6421ca3dc7e6d3947af652227a7e92e2

  • SHA256

    bbf30567b1c29bf5af5fe39487faf0a42b5ad6b2e8e66ed264e00defb08dbd6b

  • SHA512

    88ef1f1689808a20eebb3345f9ab1972c076d981b03d3cf239847017e959907f9a4ed009817c71b269f93998646a2df32cdc84ff130b77d85bbf074051a38c4c

  • SSDEEP

    6144:AIC9kGrTF4+DsFuetesc62acDUWvqNn0:AICtrW+0OscDU8qN0

Score
7/10

Malware Config

Signatures

  • Unexpected DNS network traffic destination 1 IoCs

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads