Analysis

  • max time network
    497s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16-01-2023 13:15

Errors

Reason
Reading agent response: Timeout while submitting payload

General

  • Target

    OBS/Configuration/About/cs-CZ/msprivs.dll

  • Size

    5KB

  • MD5

    7d4f6c3cdf91c4d7ee0b77d7397ef399

  • SHA1

    3aafc4a4730328724e33599ed5922a2aaec4ff47

  • SHA256

    6d01c46a5e7e5f4334c8caaa7b105b9b349831443f25b20cfb569f6531e50eb2

  • SHA512

    beb6c6d6dff9b1679c482807b75028f9ea798f51b3a75b2b3d8cf77db8ca4f9152158ee8321c1cfe29e722cb2eddfe4b9045b49dde3ba4c245f3582985e222ae

  • SSDEEP

    96:UgEME7BVd1zWWmVeeu6EPvj+xt+kNZnjo/nKU5suve4NWPw/8:UxMgVOWmAao+xBNlo/JeqWPw/8

Score
7/10

Malware Config

Signatures

  • Unexpected DNS network traffic destination 1 IoCs

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads