91eb973a8bafa8cb19d6adc7dae4e547314472bfb48869cceccb2fb926280d94 | Triage

Analysis

max time kernel
115s
max time network
125s
platform
windows10-2004_x64
resource
win10v2004-20230621-en
resource tags

arch:x64arch:x86image:win10v2004-20230621-enlocale:en-usos:windows10-2004-x64system
submitted
29-06-2023 12:12

Sharing

Report Analysis Logs

General

Target

Incidencia-Declaracion_6sgtf.zip
Size

3.1MB
MD5

1c0cc69d34459f10754e02cffd6b16be
SHA1

135d6189458232d920887092d2bf42cdb0ea5b85
SHA256

638a40597808cfa2cc5574be060469785924d11cb14ceebf921967dd6817931e
SHA512

9ca5a8930ede70b0d3573819cab85a01e933f55fa216f95c7f3b56d1e19930860589d8ef20ae2da20fc37e863eaa35b4af416af7c63d0a75ae6844fa31eb7541
SSDEEP

98304:VUgnaIZX8wdtdEM8C8KtlYfssLzPoY3han:DRREWlYfFnPVxS

Score

5^/10

Malware Config

Signatures

Drops file in System32 directory 8 IoCs

description	ioc	Process
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\InstallService\{7E06F6CA-E579-4485-AB8C-C11C55759255}.catalogItem	svchost.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\InstallService\{7E7DAE2A-5EAC-4889-86E5-50165AEA4FA3}.catalogItem	svchost.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\InstallService\{AD8957DC-D4D2-4477-AAF0-DF36D9C2D845}.catalogItem	svchost.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\InstallService\{80596C6B-9B72-4D90-AFC0-6706180980AB}.catalogItem	svchost.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\InstallService\{5C306928-72EA-480D-B360-9AE293AF2E22}.catalogItem	svchost.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\InstallService\{C817182A-9BBA-4EEA-862D-A41D592C1D7F}.catalogItem	svchost.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\InstallService\{80D47B77-6B88-44F0-A0C1-B48DF20D33A8}.catalogItem	svchost.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\InstallService\{2DBA94B1-8771-4689-81A1-ECED4EA6BED0}.catalogItem	svchost.exe

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\Incidencia-Declaracion_6sgtf.zip
1⤵
PID:2456

C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k netsvcs -p
1⤵
- Drops file in System32 directory
PID:1444

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads