Analysis
-
max time kernel
70s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
18-01-2024 10:11
General
-
Target
652050d5745a5303a8ff54662e77902c.exe
-
Size
1.3MB
-
MD5
652050d5745a5303a8ff54662e77902c
-
SHA1
740d12548b306b4ed1953ecdbf90fa7255b2fda7
-
SHA256
4759a108a1a33d66992db0371dd760ef6edb0a6a773ccf4263e0efeb2c76a80e
-
SHA512
6913129d8faad2c97cff339e9206eab990a7c31ec70d3c77169f51113fed52e612c696d40a3209e248bfe6eafa3f1b998ac654675810fed1f671308023e267e2
-
SSDEEP
24576:HAFnWzNUe3a9nvOvk+/QBNFjmDWTe2c6Ek:yWzmeK9n2FQbFBTq4
Score
6/10
Malware Config
Signatures
-
Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
Processes
-
C:\Users\Admin\AppData\Local\Temp\652050d5745a5303a8ff54662e77902c.exe"C:\Users\Admin\AppData\Local\Temp\652050d5745a5303a8ff54662e77902c.exe"1⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB