Analysis
- max time kernel
150s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20221111-en - resource tags
- submitted
05/01/2023, 00:38
General
- Target HEUR-Trojan.Win32.Bsymem.gen-4b48994ace29b4a9.exe
- Size 401KB
- Sample230105-azbveaab66
- SHA256 4b48994ace29b4a93669f1856a28c0b7d0c4a1f5155b30fd11de85dd350f5bd5
Score
10/10
Malware Config
Signatures
- OnlyLogger
A tiny loader that uses IPLogger to get its payload.
- OnlyLogger payload 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\HEUR-Trojan.Win32.Bsymem.gen-4b48994ace29b4a9.exe"C:\Users\Admin\AppData\Local\Temp\HEUR-Trojan.Win32.Bsymem.gen-4b48994ace29b4a9.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4972-132-0x0000000000769000-0x0000000000785000-memory.dmp
memory/4972-133-0x00000000006C0000-0x00000000006EE000-memory.dmp
memory/4972-134-0x0000000000400000-0x000000000046E000-memory.dmp
memory/4972-135-0x0000000000769000-0x0000000000785000-memory.dmp