Resubmissions
09-12-2022 21:25
221209-z9vgyaed42 1009-12-2022 20:57
221209-zrnxfahb5v 1002-12-2022 02:38
221202-c46axsab2w 10Analysis
-
max time network
595s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
09-12-2022 20:57
Static task
static1
Behavioral task
behavioral1
Sample
19440 Dec 01.lnk
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
19440 Dec 01.lnk
Resource
win10v2004-20220901-en
Behavioral task
behavioral3
Sample
786.dll
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
786.dll
Resource
win10v2004-20221111-en
Errors
General
-
Target
786.dll
-
Size
600KB
-
MD5
a12026e1d8d5699723e14a450f612528
-
SHA1
0eb6925e3e7e9cd9f0e472495956112195e1ed04
-
SHA256
6732fc37c4d5de1459b19b734547bd4dfd86b9b3c779d292ffffe0e74007ecb6
-
SHA512
9628b83edfb2872c01451fbac092190a6af3d85bf5b8e9ba482009e085cbc2604b00563014c8defa6862b26f5daa925aeddeee61a0b27c1a8e0cb76e3a45effc
-
SSDEEP
12288:QSUUEfo5I6/o2qgkpUdv9Msme0CWUdOWk4F:QSTiWDvLfRme0C0Wk4
Malware Config
Signatures
-
Unexpected DNS network traffic destination 3 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Processes:
description ioc Destination IP 162.159.36.2 Destination IP 162.159.36.2 Destination IP 162.159.36.2