Analysis
-
max time kernel
147s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
09/10/2023, 04:51
General
-
Target
47237a9140bcaf1cc392473579bc2f79.exe
-
Size
586KB
-
MD5
47237a9140bcaf1cc392473579bc2f79
-
SHA1
26c6bf0ad25a7c5b0c54824d17edfffd46a5f01b
-
SHA256
8ce1cb7ac147ec5b1835bb140c9a68a5e99ffc269fbcba038382ecec3295f966
-
SHA512
0bdd610c4ca369306c3e4f00ad30e627948f6f09130ec2109de06681022b0f0d31f83524c18a3095cd82ffe980b582b1f22c00875201aa1869da1d03483f1056
-
SSDEEP
12288:oY73YgYpyZoj8o9EU+aGGIrxS8wKSCK/J:oYrYNpySryU+TGwdop/J
Score
6/10
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs
-
Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
Processes
-
C:\Users\Admin\AppData\Local\Temp\47237a9140bcaf1cc392473579bc2f79.exe"C:\Users\Admin\AppData\Local\Temp\47237a9140bcaf1cc392473579bc2f79.exe"1⤵