b0352074c6f0556acf2215aa41e485085b1c7561f645f1d314a570acd31ccc1b | Triage

Analysis

max time kernel
76s
max time network
115s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
26-11-2022 11:47

Sharing

Report Analysis Logs

General

Target

2014-12-22 #32/864f15a5f814d374bd36992bea448276.exe
Size

251KB
MD5

864f15a5f814d374bd36992bea448276
SHA1

87d5a371d967cfa068777bdea879539120b749fc
SHA256

8d1f926f80c53da9ea1ca7ab9d62cd06b49a46ee94d43f37309f951395455927
SHA512

36fbbe2568685e95bf3988994c7bba624f22d8c100fe89b9d6829ba87bd17a76a3f38a26dc2fa345a8335a9466578a24d855292d4502596ad50ab089fe328bb5
SSDEEP

3072:M1le6UqAYN076conxfvnM9dtQOGDzoiKxAdgbDxNyqStBZ0XyVivp9D:Ue6UqpU4ZvM5QLDNKqs9gVtf0XUivp9

Score

6^/10

Malware Config

Signatures

Legitimate hosting services abused for malware hosting/C2 1 TTPs

Web Service
T1102

C:\Users\Admin\AppData\Local\Temp\2014-12-22 #32\864f15a5f814d374bd36992bea448276.exe
"C:\Users\Admin\AppData\Local\Temp\2014-12-22 #32\864f15a5f814d374bd36992bea448276.exe"
1⤵
PID:1396

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Web Service

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1396-54-0x000007FEF3890000-0x000007FEF42B3000-memory.dmp

Filesize
10.1MB

Download
memory/1396-55-0x000007FEF2110000-0x000007FEF31A6000-memory.dmp

Filesize
16.6MB

Download
memory/1396-56-0x000007FEFBBF1000-0x000007FEFBBF3000-memory.dmp

Filesize
8KB

Download
memory/1396-57-0x0000000000939000-0x0000000000958000-memory.dmp

Filesize
124KB

Download