Analysis

  • max time kernel
    207s
  • max time network
    211s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04-12-2022 11:59

General

  • Target

    f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe

  • Size

    249KB

  • MD5

    58036f57da89d81c64a30d281b6b6443

  • SHA1

    3c00e9c326d8e058bae5f777101b48cf8686ad91

  • SHA256

    f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd

  • SHA512

    aebf2b2425d8265517ff676a6e199fccd287016352df54e23349bfff3b973d5fdf31a53da678c70e17692eba45f334ceb61f338af6a09ce000db40cb1ffdf743

  • SSDEEP

    6144:+XYryzuMEUbWG+t3EXyJ/CGBBYLWpXqtTB6NIM:+XY2uMEUb5VCVC3eqtTg

Score
7/10

Malware Config

Signatures

  • Unexpected DNS network traffic destination 1 IoCs

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Suspicious behavior: EnumeratesProcesses 48 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe
    "C:\Users\Admin\AppData\Local\Temp\f05de2e95c40be7165673f1b21bf25528792abcec5e08438ff825146bf186acd.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:4284

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads