Analysis

  • max time network
    160s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/02/2023, 20:31

Errors

Reason
Reading agent response: read tcp 10.127.0.1:56910->10.127.0.26:8000: read: connection timed out

General

  • Target

    Installer/sfdvd.dll

  • Size

    8.6MB

  • MD5

    50379c194ebd4f7d50b732e3ba89e58b

  • SHA1

    325de808a1df378e3058543730ae79b6293e3196

  • SHA256

    1154e9c0099ba50f6dd92149f1a0189e38b179311d5e73b596c31929c2a7b331

  • SHA512

    caadd724868bdd88782b4e88217e6b2ed5e3658d53d1cb92dd6e2e45ba756511945571a742207c38929d10d77b3865f30a4720fce189f6265a1bc77e2d085076

  • SSDEEP

    49152:QIbIaI6MsawQSR7dlFYmwlzCY1dGJwtNqJ2F:z+K2TtC8

Score
7/10

Malware Config

Signatures

  • Unexpected DNS network traffic destination 2 IoCs

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

Processes

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads