Analysis

  • max time network
    509s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/11/2022, 23:32

Errors

Reason
Reading agent response: Timeout while submitting payload

General

  • Target

    relefnyiy_press_za_3_mesyatsa_tfile_ru.exe

  • Size

    506KB

  • MD5

    a1a1b7155198c49ee42ec1f4ee498752

  • SHA1

    6f4ae37246c576c9be27118ec3b5c8430f7e35a2

  • SHA256

    65aa39d520ec75c49ed715793f865b752b7919a918bc2da5a12a72e02c99e05b

  • SHA512

    54fe02d4fcd571e1e55b4ef84ea235ec03ce366aab56031800cc0c0ad76ac228bb04eb8fd5aa829829e9f17fde4062f08bf0fff13419b4e77a20d900fd1f9770

  • SSDEEP

    6144:9Dl3g6oREAIDFYUkRmuWLPp+rPGo8spnFme4rYDQ7Z9vYFgXcu5/QxhR/WTEouyI:9D1g6IEtvkt8W8Mh+YMiiviHGI

Score
7/10

Malware Config

Signatures

  • Unexpected DNS network traffic destination 3 IoCs

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

Processes

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads