Analysis

  • max time network
    434s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16-01-2023 12:59

Errors

Reason
Reading agent response: read tcp 10.127.0.1:41928->10.127.0.96:8000: read: connection timed out

General

  • Target

    OBS/Configuration/About/cs-CZ/comctl32.dll

  • Size

    6KB

  • MD5

    264ad7f703050808a3980af85a406724

  • SHA1

    e22c19a360cd32df0a3e264d246b02f09ac936c5

  • SHA256

    9a946ab3ed71b6c50184018a8779027f8aa8e892a5cb4a795e4674ecfc2c7b2b

  • SHA512

    8e85d18f64961cb13813fd02f014c4e722d12eafb8229f46b3f7b7814b94b841d035a247f58a89363a6b1ca7802a34a99b18aa268f79b0cfa4797126b7ec9de9

  • SSDEEP

    48:yt/gzOeu+sfGogiAE+fdncS9psp2o0phusS6QSGNMtfs68mmoG4LZWsu1AOJwbxK:A/PzAEyaS9pspULz2eSB4NWBA0Px

Score
7/10

Malware Config

Signatures

  • Unexpected DNS network traffic destination 3 IoCs

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads