Analysis

  • max time kernel
    53s
  • max time network
    184s
  • platform
    windows10-1703_x64
  • resource
    win10-20220812-en
  • resource tags

    arch:x64arch:x86image:win10-20220812-enlocale:en-usos:windows10-1703-x64system
  • submitted
    15/08/2022, 20:43

General

  • Target

    sd.exe

  • Size

    596KB

  • MD5

    112f944b3c6f80dd99efd3d3da60d16a

  • SHA1

    72d7b61060fc7d67c7bd6b5546bc40bf573b8dc7

  • SHA256

    b2f57cb17dbb818945da02b099575625b904c4732f54ffd91560b95f72d95160

  • SHA512

    ae0f6139d0eb445e1854cbb533a734e229c9ed5cec57434d8fbd526930b85fa732930bc9164ca3f336625f5fdb32f44d93a822dffc688acce8a92ae8825c5c7a

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\sd.exe
    "C:\Users\Admin\AppData\Local\Temp\sd.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:844

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/844-117-0x0000000077880000-0x0000000077A0E000-memory.dmp

          Filesize

          1.6MB

        • memory/844-118-0x0000000077880000-0x0000000077A0E000-memory.dmp

          Filesize

          1.6MB

        • memory/844-119-0x0000000077880000-0x0000000077A0E000-memory.dmp

          Filesize

          1.6MB

        • memory/844-120-0x0000000077880000-0x0000000077A0E000-memory.dmp

          Filesize

          1.6MB

        • memory/844-121-0x0000000077880000-0x0000000077A0E000-memory.dmp

          Filesize

          1.6MB

        • memory/844-122-0x0000000077880000-0x0000000077A0E000-memory.dmp

          Filesize

          1.6MB

        • memory/844-123-0x0000000077880000-0x0000000077A0E000-memory.dmp

          Filesize

          1.6MB

        • memory/844-124-0x0000000077880000-0x0000000077A0E000-memory.dmp

          Filesize

          1.6MB

        • memory/844-125-0x0000000077880000-0x0000000077A0E000-memory.dmp

          Filesize

          1.6MB

        • memory/844-126-0x0000000077880000-0x0000000077A0E000-memory.dmp

          Filesize

          1.6MB

        • memory/844-127-0x0000000077880000-0x0000000077A0E000-memory.dmp

          Filesize

          1.6MB

        • memory/844-128-0x0000000077880000-0x0000000077A0E000-memory.dmp

          Filesize

          1.6MB

        • memory/844-129-0x0000000077880000-0x0000000077A0E000-memory.dmp

          Filesize

          1.6MB

        • memory/844-130-0x0000000077880000-0x0000000077A0E000-memory.dmp

          Filesize

          1.6MB

        • memory/844-131-0x0000000077880000-0x0000000077A0E000-memory.dmp

          Filesize

          1.6MB

        • memory/844-132-0x0000000077880000-0x0000000077A0E000-memory.dmp

          Filesize

          1.6MB

        • memory/844-133-0x0000000077880000-0x0000000077A0E000-memory.dmp

          Filesize

          1.6MB

        • memory/844-134-0x0000000077880000-0x0000000077A0E000-memory.dmp

          Filesize

          1.6MB

        • memory/844-136-0x0000000077880000-0x0000000077A0E000-memory.dmp

          Filesize

          1.6MB

        • memory/844-135-0x0000000077880000-0x0000000077A0E000-memory.dmp

          Filesize

          1.6MB

        • memory/844-137-0x0000000077880000-0x0000000077A0E000-memory.dmp

          Filesize

          1.6MB

        • memory/844-138-0x0000000077880000-0x0000000077A0E000-memory.dmp

          Filesize

          1.6MB

        • memory/844-139-0x0000000077880000-0x0000000077A0E000-memory.dmp

          Filesize

          1.6MB

        • memory/844-140-0x0000000077880000-0x0000000077A0E000-memory.dmp

          Filesize

          1.6MB

        • memory/844-141-0x0000000077880000-0x0000000077A0E000-memory.dmp

          Filesize

          1.6MB

        • memory/844-142-0x0000000077880000-0x0000000077A0E000-memory.dmp

          Filesize

          1.6MB

        • memory/844-143-0x0000000077880000-0x0000000077A0E000-memory.dmp

          Filesize

          1.6MB

        • memory/844-144-0x0000000077880000-0x0000000077A0E000-memory.dmp

          Filesize

          1.6MB

        • memory/844-146-0x0000000077880000-0x0000000077A0E000-memory.dmp

          Filesize

          1.6MB

        • memory/844-147-0x0000000077880000-0x0000000077A0E000-memory.dmp

          Filesize

          1.6MB

        • memory/844-149-0x0000000077880000-0x0000000077A0E000-memory.dmp

          Filesize

          1.6MB

        • memory/844-150-0x0000000077880000-0x0000000077A0E000-memory.dmp

          Filesize

          1.6MB

        • memory/844-151-0x0000000077880000-0x0000000077A0E000-memory.dmp

          Filesize

          1.6MB

        • memory/844-152-0x0000000077880000-0x0000000077A0E000-memory.dmp

          Filesize

          1.6MB

        • memory/844-153-0x0000000077880000-0x0000000077A0E000-memory.dmp

          Filesize

          1.6MB

        • memory/844-154-0x0000000077880000-0x0000000077A0E000-memory.dmp

          Filesize

          1.6MB

        • memory/844-155-0x0000000077880000-0x0000000077A0E000-memory.dmp

          Filesize

          1.6MB

        • memory/844-156-0x0000000077880000-0x0000000077A0E000-memory.dmp

          Filesize

          1.6MB

        • memory/844-157-0x0000000077880000-0x0000000077A0E000-memory.dmp

          Filesize

          1.6MB

        • memory/844-158-0x0000000077880000-0x0000000077A0E000-memory.dmp

          Filesize

          1.6MB

        • memory/844-159-0x0000000077880000-0x0000000077A0E000-memory.dmp

          Filesize

          1.6MB

        • memory/844-160-0x0000000077880000-0x0000000077A0E000-memory.dmp

          Filesize

          1.6MB

        • memory/844-161-0x0000000077880000-0x0000000077A0E000-memory.dmp

          Filesize

          1.6MB

        • memory/844-162-0x0000000077880000-0x0000000077A0E000-memory.dmp

          Filesize

          1.6MB

        • memory/844-163-0x0000000077880000-0x0000000077A0E000-memory.dmp

          Filesize

          1.6MB

        • memory/844-164-0x0000000077880000-0x0000000077A0E000-memory.dmp

          Filesize

          1.6MB

        • memory/844-165-0x0000000077880000-0x0000000077A0E000-memory.dmp

          Filesize

          1.6MB