Analysis

  • max time network
    595s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-11-2022 19:37

Errors

Reason
Reading agent response: Timeout while submitting payload

General

  • Target

    HearthCrawler_R30_10/Hearthcrawler.exe

  • Size

    897KB

  • MD5

    b1957d42e692bde123f46c69bf5a8c07

  • SHA1

    fc888e6553e2a7bef9cf875fb128abd4ce54b79d

  • SHA256

    cf51afce6ebdadcf2546873479b49b00e1df8296c9ddcea1e52bb787eac4b596

  • SHA512

    26652121c01bf0c32501dd481c96ea351e404eb2b3294299c0a35f59668a4d2f5c6356f4a3da971946ed96d555d56f531a9e58d51fd27c7b678596dc63a431f3

  • SSDEEP

    24576:jgvnYTQmGhVekKcGQfOZhROydA/Fer49uPQJcDKwNgnnPd:jgQTQmeekKcfmZbAN7obHNQ

Score
7/10

Malware Config

Signatures

  • Unexpected DNS network traffic destination 2 IoCs

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads