Analysis

  • max time network
    552s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10-12-2022 05:06

Errors

Reason
Reading agent response: read tcp 10.127.0.1:36374->10.127.0.23:8000: read: connection timed out

General

  • Target

    SoftInstall/About/en-US/AutoPlay.xml

  • Size

    4KB

  • MD5

    935c602dad3f4335bd16c269e66dbfaa

  • SHA1

    3df4dc6d55af20f0593d807fb4fdefb23cc3355a

  • SHA256

    8773998440c8d534fa69833174d05d09088f07e6e5c0e41d7c04a229c7903879

  • SHA512

    05abffc0ce836f7438bc711a9d2b5ceb8f3f1c48be2ac9c1a91d286aed6fc4c8d740ae802dcd2cc65d066972dc8daa84ad8a10fa775d66cb5f3de34688d975ec

  • SSDEEP

    96:LeD5pmCRsKp7RqiPKhB3a1jejcM64iVDJaqV:ELRRp74a1AbodJ7

Score
7/10

Malware Config

Signatures

  • Unexpected DNS network traffic destination 2 IoCs

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads