Analysis
-
max time kernel
150s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
20-03-2024 12:12
Static task
static1
Behavioral task
behavioral1
Sample
d8c62ac87bfc863525b9ad700c3515cd.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
d8c62ac87bfc863525b9ad700c3515cd.exe
Resource
win10v2004-20231215-en
General
-
Target
d8c62ac87bfc863525b9ad700c3515cd.exe
-
Size
386KB
-
MD5
d8c62ac87bfc863525b9ad700c3515cd
-
SHA1
ab8b036293332398b3a81d8a91089b7cb6269bac
-
SHA256
5dd59397cd5602fe62425fd765646360de68c56ff17ddb271886bded9f975f3b
-
SHA512
a6f679fecba89b27916eb932e45a9c1b1e31901617ec549335f9f83ebcbfbd0318ab76f004e5d76ec8b646dabec52632784678cf2275dcc893f3f49d166329a2
-
SSDEEP
6144:2a17dKXao6I/RcKfq0Ut0pXxdWvLVnblYbyaNznhoFJEU2t:t7dKXaonnfq0UMnWTVBINzhoM
Malware Config
Extracted
gcleaner
gc-prtnrs.top
gcc-prtnrs.top
Signatures
-
OnlyLogger
A tiny loader that uses IPLogger to get its payload.
-
OnlyLogger payload 4 IoCs
resource yara_rule behavioral2/memory/4724-2-0x0000000004E60000-0x0000000004E8E000-memory.dmp family_onlylogger behavioral2/memory/4724-3-0x0000000000400000-0x000000000325B000-memory.dmp family_onlylogger behavioral2/memory/4724-4-0x0000000000400000-0x000000000325B000-memory.dmp family_onlylogger behavioral2/memory/4724-7-0x0000000004E60000-0x0000000004E8E000-memory.dmp family_onlylogger