Analysis

  • max time kernel
    152s
  • max time network
    190s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    01-12-2022 10:11

General

  • Target

    5c35cea91a62e33f300af53d1aeb8c6e575706518f4627fea8bc500c25f50b4f.exe

  • Size

    392KB

  • MD5

    174509c18b0d252772efe9163715f342

  • SHA1

    338b2de465c02251a39cc1c37a80caeef6e8383a

  • SHA256

    5c35cea91a62e33f300af53d1aeb8c6e575706518f4627fea8bc500c25f50b4f

  • SHA512

    6b26a1307ac35b2eb1f5f86af830d770cd4e85f2483905ec25777b3fbe221703fe35de476ac6f1cc6da6a75b1f307ceec81df87a2ec98d599dd46a1b1ef68142

  • SSDEEP

    6144:yHw7lPhs0FpSEpmCgziqtFR8qxp4yvIHdAJLcPlcmlKLiI05CuUUG/Nlb7K3pKbk:kw7s2EE2l8qxp779iI0PkwV

Score
6/10

Malware Config

Signatures

  • Looks up external IP address via web service 1 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

Processes

  • C:\Users\Admin\AppData\Local\Temp\5c35cea91a62e33f300af53d1aeb8c6e575706518f4627fea8bc500c25f50b4f.exe
    "C:\Users\Admin\AppData\Local\Temp\5c35cea91a62e33f300af53d1aeb8c6e575706518f4627fea8bc500c25f50b4f.exe"
    1⤵
      PID:1228

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1228-54-0x00000000767F1000-0x00000000767F3000-memory.dmp

      Filesize

      8KB