0cb8404062b04549b8b8ad5a6b27aeba1a001b0d602c79f196cc16fbd427aa0d | Triage

Analysis

max time kernel
42s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
08/01/2023, 05:11

Sharing

Report Analysis Logs

General

Target

ibtusb.cat
Size

11KB
MD5

0db4de032357484ccb341e63508d0550
SHA1

43560859a2cd9d42c847da98f7aa8690bfd1ff77
SHA256

1adfe363507187084bf4eff10c77c2ee8a5cf6c2761ee4f65762bfef224bb0b0
SHA512

3ace2fe93f241f7f6a7700019c45ef23c964b81d300467085ae57710f3c8a37110a42b944680ed67626e77117dfc074ac6d6ee6292c6fdc4050d95781bad7b3b
SSDEEP

192:1Xsask6JyynJC0coPOL7yKnUi8rFWQFNgyuq21eX01k9z3A8PZLF0V:18vJHn4CFRlul8R9zBZRC

Score

8^/10

Malware Config

Signatures

Blocklisted process makes network request 1 IoCs

flow	pid	Process
2	1340	rundll32.exe

C:\Windows\system32\rundll32.exe
C:\Windows\system32\rundll32.exe cryptext.dll,CryptExtOpenCAT C:\Users\Admin\AppData\Local\Temp\ibtusb.cat
1⤵
- Blocklisted process makes network request
PID:1340

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1340-54-0x000007FEFBFE1000-0x000007FEFBFE3000-memory.dmp

Filesize
8KB

Download