Analysis
-
max time kernel
156s -
max time network
178s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
28-11-2022 15:11
Behavioral task
behavioral1
Sample
e9975726f54ec3b8a562bbd00cbd68e1a3d2ceba1681eab1b8fe556c1d35cd9c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e9975726f54ec3b8a562bbd00cbd68e1a3d2ceba1681eab1b8fe556c1d35cd9c.exe
Resource
win10v2004-20221111-en
General
-
Target
e9975726f54ec3b8a562bbd00cbd68e1a3d2ceba1681eab1b8fe556c1d35cd9c.exe
-
Size
698KB
-
MD5
f351029c56334ea331855c013bd60464
-
SHA1
4cb144bf8a26f07a5b37c1c294427224a73bf7b3
-
SHA256
e9975726f54ec3b8a562bbd00cbd68e1a3d2ceba1681eab1b8fe556c1d35cd9c
-
SHA512
c6cc2c22ec298cbffed3c4321793bcadf6b0db09924a97cfe84bf421936679c80f4492a147c09e1e7edbea5af9b24168465c79baa2db2d99a2694f31f495f89c
-
SSDEEP
12288:cWcIaRjMQwT2wR7/RAfU+kDaNSxgamfylaI0wqRu7FwruP17wyKL9LOHTz7kMkvw:WFGpR/RAAaNvfylaIPqR+FpilPz4p
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
Processes:
e9975726f54ec3b8a562bbd00cbd68e1a3d2ceba1681eab1b8fe556c1d35cd9c.exepid process 4988 e9975726f54ec3b8a562bbd00cbd68e1a3d2ceba1681eab1b8fe556c1d35cd9c.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Local\Temp\c11f1908-ec82-406b-aa23-3ccb9a0d9d2b\AgileDotNetRT.dllFilesize
119KB
MD56ee05d61422e4025f007d60da539b663
SHA198dfd05b896bce7cbd987d8012e055ee57cad30a
SHA256edcffe546787dae9648270886275b5ff8dc5a5b358cc714645d6cb2f3f8d6880
SHA512aa7f5555c3385c387b0e22411f76886b403bc503b6520b69849c7a3eb20a967aee84b8a8e4db7f96acb6ead98f61d6495f52b78c0505655d92e2f5dcc2ad17f2
-
memory/4988-132-0x0000000075440000-0x00000000759F1000-memory.dmpFilesize
5.7MB
-
memory/4988-134-0x0000000074160000-0x00000000741BB000-memory.dmpFilesize
364KB
-
memory/4988-135-0x0000000073940000-0x0000000073972000-memory.dmpFilesize
200KB
-
memory/4988-136-0x0000000075440000-0x00000000759F1000-memory.dmpFilesize
5.7MB
-
memory/4988-137-0x0000000073940000-0x0000000073972000-memory.dmpFilesize
200KB
-
memory/4988-138-0x0000000075440000-0x00000000759F1000-memory.dmpFilesize
5.7MB