Analysis

  • max time network
    366s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16-01-2023 07:07

Errors

Reason
Reading agent response: read tcp 10.127.0.1:43122->10.127.0.23:8000: read: connection timed out

General

  • Target

    OBS/Configuration/About/da-DK/cdosys.dll

  • Size

    47KB

  • MD5

    d0720d39f722d65069e796556f4ef0cf

  • SHA1

    95db150585855c48c6def31f4973a8df1f31bad4

  • SHA256

    5b825dd0b710fa99703e741bff6528fba8a85a5df5a0399ec5d0bef3b4785b0f

  • SHA512

    6c02f490c71338d369185fc828606f31fe5346b7fc80b8e58f59aedac2cb30cb80e1d151375e6c0c477ecdd9d8b8fe263363774ff18ba371f38481f0500cf53b

  • SSDEEP

    768:0ss3J6iDjyUcEsx7fNXjTV8PszW7yYsznPy3IhWSzjfWFVUe8BVYhIAAInmVLHPH:FkJ6ivyUcEsx7fNXjTV8PszW7yYsznPN

Score
7/10

Malware Config

Signatures

  • Unexpected DNS network traffic destination 1 IoCs

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads