Analysis
-
max time kernel
151s -
max time network
182s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
28-11-2022 15:11
Behavioral task
behavioral1
Sample
177b6b83afdbe0e40b0435acfd52221b2c5be56aac5dde792c35b22f3d6fba42.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
177b6b83afdbe0e40b0435acfd52221b2c5be56aac5dde792c35b22f3d6fba42.exe
Resource
win10v2004-20221111-en
General
-
Target
177b6b83afdbe0e40b0435acfd52221b2c5be56aac5dde792c35b22f3d6fba42.exe
-
Size
407KB
-
MD5
18984b27fb287c290edcaf2435da9e36
-
SHA1
85605786b98298294e9e2115c4a384d72f566dfd
-
SHA256
177b6b83afdbe0e40b0435acfd52221b2c5be56aac5dde792c35b22f3d6fba42
-
SHA512
2efbd48b02dca536806edcbc8090dcd7cebd2c7c118bff1d1f8a62857d78bec1c7c282f37e0b77ae9b809f79c0de6b7f9cb3b87980f5354dc5f9d622642b954a
-
SSDEEP
6144:JLu0bgLkDHmfXwXsCaIMdXwqRuw8Ttcnyzv5+AeDkaBR+YJFC3:JTgamfylaI0wqRu7Fwr7F
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
Processes:
177b6b83afdbe0e40b0435acfd52221b2c5be56aac5dde792c35b22f3d6fba42.exepid process 4472 177b6b83afdbe0e40b0435acfd52221b2c5be56aac5dde792c35b22f3d6fba42.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Local\Temp\3e36ec64-460c-46a2-8c94-d8263dc20340\AgileDotNetRT.dllFilesize
119KB
MD56ee05d61422e4025f007d60da539b663
SHA198dfd05b896bce7cbd987d8012e055ee57cad30a
SHA256edcffe546787dae9648270886275b5ff8dc5a5b358cc714645d6cb2f3f8d6880
SHA512aa7f5555c3385c387b0e22411f76886b403bc503b6520b69849c7a3eb20a967aee84b8a8e4db7f96acb6ead98f61d6495f52b78c0505655d92e2f5dcc2ad17f2
-
memory/4472-132-0x00000000746C0000-0x0000000074C71000-memory.dmpFilesize
5.7MB
-
memory/4472-134-0x00000000733E0000-0x000000007343B000-memory.dmpFilesize
364KB
-
memory/4472-135-0x0000000072BC0000-0x0000000072BF2000-memory.dmpFilesize
200KB
-
memory/4472-136-0x00000000746C0000-0x0000000074C71000-memory.dmpFilesize
5.7MB
-
memory/4472-137-0x0000000072BC0000-0x0000000072BF2000-memory.dmpFilesize
200KB
-
memory/4472-138-0x00000000746C0000-0x0000000074C71000-memory.dmpFilesize
5.7MB