Analysis
-
max time kernel
302s -
max time network
363s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
28-11-2022 17:33
Behavioral task
behavioral1
Sample
a45e49b20a945f4516abd054fc8372d0ab2337c7f59b1eeb8e652a13e83805f3.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a45e49b20a945f4516abd054fc8372d0ab2337c7f59b1eeb8e652a13e83805f3.exe
Resource
win10v2004-20221111-en
General
-
Target
a45e49b20a945f4516abd054fc8372d0ab2337c7f59b1eeb8e652a13e83805f3.exe
-
Size
426KB
-
MD5
e9235a8066b308d456bfb24357b394b5
-
SHA1
12284d4b88cddb97c86bd50a5dad8d2797a912c3
-
SHA256
a45e49b20a945f4516abd054fc8372d0ab2337c7f59b1eeb8e652a13e83805f3
-
SHA512
157af660380dff7379aee8d21b00d3f87d8fbe8430e7428048a63d89b362e2bbaaec91d2b1f42d8a39fe96b5eccb0e4073a2d20d03c22aa0f601d9e89ea7ab86
-
SSDEEP
12288:aOWhpVTwgamfylaI0wqRu7Fwr3q0B26Ghv+l:OzLfylaIPqR+FDr
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
Processes:
a45e49b20a945f4516abd054fc8372d0ab2337c7f59b1eeb8e652a13e83805f3.exepid process 4736 a45e49b20a945f4516abd054fc8372d0ab2337c7f59b1eeb8e652a13e83805f3.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Local\Temp\6ed9a287-57e8-403a-b912-a6284a177b64\AgileDotNetRT.dllFilesize
119KB
MD56ee05d61422e4025f007d60da539b663
SHA198dfd05b896bce7cbd987d8012e055ee57cad30a
SHA256edcffe546787dae9648270886275b5ff8dc5a5b358cc714645d6cb2f3f8d6880
SHA512aa7f5555c3385c387b0e22411f76886b403bc503b6520b69849c7a3eb20a967aee84b8a8e4db7f96acb6ead98f61d6495f52b78c0505655d92e2f5dcc2ad17f2
-
memory/4736-132-0x00000000748A0000-0x0000000074E51000-memory.dmpFilesize
5.7MB
-
memory/4736-134-0x00000000735C0000-0x000000007361B000-memory.dmpFilesize
364KB
-
memory/4736-135-0x0000000072DA0000-0x0000000072DD2000-memory.dmpFilesize
200KB
-
memory/4736-136-0x00000000748A0000-0x0000000074E51000-memory.dmpFilesize
5.7MB
-
memory/4736-137-0x0000000072DA0000-0x0000000072DD2000-memory.dmpFilesize
200KB