Analysis
-
max time network
424s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
10-12-2022 05:06
Errors
Reason
Reading agent response: read tcp 10.127.0.1:41028->10.127.0.25:8000: read: connection timed out
General
-
Target
SoftInstall/About/en-US/AuditSettings.xml
-
Size
1KB
-
MD5
71075fce08402095aeafbe57962a1f5b
-
SHA1
f76fae255aa5454217fe973c4a8035ec9005b923
-
SHA256
6928faad9624bbf4c74f6c138496a4c6ae8d04919c3de9591568300c1dd39e59
-
SHA512
9df7480e584b16d1b504e2503b3c4c8422efc2fa37d9a4aceb8a7aea0561c0d73e8e73cb21fea20c6ec3bbbcb715c155efda7b8e38b7b448bcda5db10d773de4
Score
7/10
Malware Config
Signatures
-
Unexpected DNS network traffic destination 2 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.