Analysis

  • max time kernel
    51s
  • max time network
    60s
  • platform
    windows10-1703_x64
  • resource
    win10-20220812-en
  • resource tags

    arch:x64arch:x86image:win10-20220812-enlocale:en-usos:windows10-1703-x64system
  • submitted
    15-08-2022 20:52

General

  • Target

    InstallUtil.exe

  • Size

    596KB

  • MD5

    112f944b3c6f80dd99efd3d3da60d16a

  • SHA1

    72d7b61060fc7d67c7bd6b5546bc40bf573b8dc7

  • SHA256

    b2f57cb17dbb818945da02b099575625b904c4732f54ffd91560b95f72d95160

  • SHA512

    ae0f6139d0eb445e1854cbb533a734e229c9ed5cec57434d8fbd526930b85fa732930bc9164ca3f336625f5fdb32f44d93a822dffc688acce8a92ae8825c5c7a

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\InstallUtil.exe
    "C:\Users\Admin\AppData\Local\Temp\InstallUtil.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2276

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2276-117-0x0000000077660000-0x00000000777EE000-memory.dmp

    Filesize

    1.6MB

  • memory/2276-118-0x0000000077660000-0x00000000777EE000-memory.dmp

    Filesize

    1.6MB

  • memory/2276-119-0x0000000077660000-0x00000000777EE000-memory.dmp

    Filesize

    1.6MB

  • memory/2276-120-0x0000000077660000-0x00000000777EE000-memory.dmp

    Filesize

    1.6MB

  • memory/2276-121-0x0000000077660000-0x00000000777EE000-memory.dmp

    Filesize

    1.6MB

  • memory/2276-122-0x0000000077660000-0x00000000777EE000-memory.dmp

    Filesize

    1.6MB

  • memory/2276-123-0x0000000077660000-0x00000000777EE000-memory.dmp

    Filesize

    1.6MB

  • memory/2276-124-0x0000000077660000-0x00000000777EE000-memory.dmp

    Filesize

    1.6MB

  • memory/2276-125-0x0000000077660000-0x00000000777EE000-memory.dmp

    Filesize

    1.6MB

  • memory/2276-126-0x0000000077660000-0x00000000777EE000-memory.dmp

    Filesize

    1.6MB

  • memory/2276-127-0x0000000077660000-0x00000000777EE000-memory.dmp

    Filesize

    1.6MB

  • memory/2276-128-0x0000000077660000-0x00000000777EE000-memory.dmp

    Filesize

    1.6MB

  • memory/2276-129-0x0000000077660000-0x00000000777EE000-memory.dmp

    Filesize

    1.6MB

  • memory/2276-130-0x0000000077660000-0x00000000777EE000-memory.dmp

    Filesize

    1.6MB

  • memory/2276-131-0x0000000077660000-0x00000000777EE000-memory.dmp

    Filesize

    1.6MB

  • memory/2276-132-0x0000000077660000-0x00000000777EE000-memory.dmp

    Filesize

    1.6MB

  • memory/2276-133-0x0000000077660000-0x00000000777EE000-memory.dmp

    Filesize

    1.6MB

  • memory/2276-134-0x0000000077660000-0x00000000777EE000-memory.dmp

    Filesize

    1.6MB

  • memory/2276-135-0x0000000077660000-0x00000000777EE000-memory.dmp

    Filesize

    1.6MB

  • memory/2276-136-0x0000000077660000-0x00000000777EE000-memory.dmp

    Filesize

    1.6MB

  • memory/2276-137-0x0000000077660000-0x00000000777EE000-memory.dmp

    Filesize

    1.6MB

  • memory/2276-138-0x0000000077660000-0x00000000777EE000-memory.dmp

    Filesize

    1.6MB

  • memory/2276-139-0x0000000077660000-0x00000000777EE000-memory.dmp

    Filesize

    1.6MB

  • memory/2276-140-0x0000000077660000-0x00000000777EE000-memory.dmp

    Filesize

    1.6MB

  • memory/2276-141-0x0000000077660000-0x00000000777EE000-memory.dmp

    Filesize

    1.6MB

  • memory/2276-142-0x0000000077660000-0x00000000777EE000-memory.dmp

    Filesize

    1.6MB

  • memory/2276-143-0x0000000077660000-0x00000000777EE000-memory.dmp

    Filesize

    1.6MB

  • memory/2276-144-0x0000000077660000-0x00000000777EE000-memory.dmp

    Filesize

    1.6MB

  • memory/2276-146-0x0000000077660000-0x00000000777EE000-memory.dmp

    Filesize

    1.6MB

  • memory/2276-147-0x0000000077660000-0x00000000777EE000-memory.dmp

    Filesize

    1.6MB

  • memory/2276-149-0x0000000077660000-0x00000000777EE000-memory.dmp

    Filesize

    1.6MB

  • memory/2276-150-0x0000000077660000-0x00000000777EE000-memory.dmp

    Filesize

    1.6MB

  • memory/2276-151-0x0000000077660000-0x00000000777EE000-memory.dmp

    Filesize

    1.6MB

  • memory/2276-152-0x0000000077660000-0x00000000777EE000-memory.dmp

    Filesize

    1.6MB

  • memory/2276-153-0x0000000077660000-0x00000000777EE000-memory.dmp

    Filesize

    1.6MB

  • memory/2276-154-0x0000000077660000-0x00000000777EE000-memory.dmp

    Filesize

    1.6MB

  • memory/2276-155-0x0000000077660000-0x00000000777EE000-memory.dmp

    Filesize

    1.6MB

  • memory/2276-156-0x0000000077660000-0x00000000777EE000-memory.dmp

    Filesize

    1.6MB

  • memory/2276-157-0x0000000077660000-0x00000000777EE000-memory.dmp

    Filesize

    1.6MB

  • memory/2276-158-0x0000000077660000-0x00000000777EE000-memory.dmp

    Filesize

    1.6MB

  • memory/2276-159-0x0000000077660000-0x00000000777EE000-memory.dmp

    Filesize

    1.6MB

  • memory/2276-160-0x0000000077660000-0x00000000777EE000-memory.dmp

    Filesize

    1.6MB

  • memory/2276-161-0x0000000077660000-0x00000000777EE000-memory.dmp

    Filesize

    1.6MB

  • memory/2276-162-0x0000000077660000-0x00000000777EE000-memory.dmp

    Filesize

    1.6MB

  • memory/2276-163-0x0000000077660000-0x00000000777EE000-memory.dmp

    Filesize

    1.6MB

  • memory/2276-164-0x0000000077660000-0x00000000777EE000-memory.dmp

    Filesize

    1.6MB

  • memory/2276-165-0x0000000077660000-0x00000000777EE000-memory.dmp

    Filesize

    1.6MB