b0352074c6f0556acf2215aa41e485085b1c7561f645f1d314a570acd31ccc1b | Triage

Analysis

max time kernel
43s
max time network
115s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
26-11-2022 11:47

Sharing

Report Analysis Logs

General

Target

2014-12-22 #32/409541f2ca9bc08e528a05970e278e57.exe
Size

233KB
MD5

409541f2ca9bc08e528a05970e278e57
SHA1

f74fa666a8ef14232a6c61da9e5ae47caaabb5a7
SHA256

5148d95eb0c32118ae904534cb1c1098c8cf48a79941f320f8433f76fd78e91b
SHA512

311f819fca707b4f22b68cd68a15f7105a45e388b0cd68de345418a158f1eb407b9ee26735be2b2018e8210007d442bc7f3aad2e9692e4db525b8cd4c23e04f8
SSDEEP

3072:w1le6UqAYN076conxfvnM9dtQOGDzoiKxAdgbDxNyqStBZ0XEHKUCdBbD:Ae6UqpU4ZvM5QLDNKqs9gVtf0XOCdVD

Score

6^/10

Malware Config

Signatures

Legitimate hosting services abused for malware hosting/C2 1 TTPs

Web Service
T1102

C:\Users\Admin\AppData\Local\Temp\2014-12-22 #32\409541f2ca9bc08e528a05970e278e57.exe
"C:\Users\Admin\AppData\Local\Temp\2014-12-22 #32\409541f2ca9bc08e528a05970e278e57.exe"
1⤵
PID:1368

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Web Service

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1368-54-0x000007FEF3740000-0x000007FEF4163000-memory.dmp

Filesize
10.1MB

Download
memory/1368-55-0x000007FEF26A0000-0x000007FEF3736000-memory.dmp

Filesize
16.6MB

Download
memory/1368-56-0x000007FEFBB51000-0x000007FEFBB53000-memory.dmp

Filesize
8KB

Download
memory/1368-57-0x0000000000B79000-0x0000000000B98000-memory.dmp

Filesize
124KB

Download