Analysis
-
max time kernel
43s -
max time network
47s -
platform
windows7_x64 -
resource
win7-20220414-en -
submitted
03-07-2022 03:13
Static task
static1
Behavioral task
behavioral1
Sample
3d662fc8007d60de28089087e384fbc44dccdd8b8f8923409df56c0acbc430eb.exe
Resource
win7-20220414-en
windows7_x64
0 signatures
0 seconds
General
-
Target
3d662fc8007d60de28089087e384fbc44dccdd8b8f8923409df56c0acbc430eb.exe
-
Size
828KB
-
MD5
821e4ed507878cd2e1b6c7c215da9090
-
SHA1
0216f295e6b498dd09376e6de693b5573c17456e
-
SHA256
3d662fc8007d60de28089087e384fbc44dccdd8b8f8923409df56c0acbc430eb
-
SHA512
4c836bf11da4ffd0d2fa5e1d0575e592f48ec8fbe489371a648c5b1f0e24d3168ea444af7a6a3b85567cf2d616b9219caa529a53543bbbc4ed33388928f28ce1
Malware Config
Signatures
-
Trickbot x86 loader 3 IoCs
Detected Trickbot's x86 loader that unpacks the x86 payload.
Processes:
resource yara_rule behavioral1/memory/1664-56-0x0000000000560000-0x000000000058B000-memory.dmp trickbot_loader32 behavioral1/memory/1664-59-0x0000000000560000-0x000000000058B000-memory.dmp trickbot_loader32 behavioral1/memory/1664-60-0x0000000000560000-0x000000000058B000-memory.dmp trickbot_loader32 -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
3d662fc8007d60de28089087e384fbc44dccdd8b8f8923409df56c0acbc430eb.exepid process 1664 3d662fc8007d60de28089087e384fbc44dccdd8b8f8923409df56c0acbc430eb.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1664-56-0x0000000000560000-0x000000000058B000-memory.dmpFilesize
172KB
-
memory/1664-58-0x0000000076011000-0x0000000076013000-memory.dmpFilesize
8KB
-
memory/1664-59-0x0000000000560000-0x000000000058B000-memory.dmpFilesize
172KB
-
memory/1664-60-0x0000000000560000-0x000000000058B000-memory.dmpFilesize
172KB