Analysis

  • max time kernel
    34s
  • max time network
    45s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    19/09/2022, 13:22

General

  • Target

    2669dfa8e01faa447ef5477770b82df62742f43629a63ac007ca16a89ba94d8e.exe

  • Size

    7.5MB

  • MD5

    a33c58349f9686bc034b5ffbf207ce3d

  • SHA1

    58672b5c266a78f2dbfa643f84bba95c487c78c0

  • SHA256

    2669dfa8e01faa447ef5477770b82df62742f43629a63ac007ca16a89ba94d8e

  • SHA512

    aea1cec255d1bea6569da715efb948cd5697e45852163d33b937083f9cf081941027e9c4321a193c1e4625be5f442214df3e3c4513121aec0dfe213f5048510a

  • SSDEEP

    196608:Mx6FCOrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrX:MxxOrrrrrrrrrrrrrrrrrrrrrrrrrrr/

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2669dfa8e01faa447ef5477770b82df62742f43629a63ac007ca16a89ba94d8e.exe
    "C:\Users\Admin\AppData\Local\Temp\2669dfa8e01faa447ef5477770b82df62742f43629a63ac007ca16a89ba94d8e.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1508

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1508-54-0x0000000000400000-0x000000000044F000-memory.dmp

    Filesize

    316KB

  • memory/1508-55-0x0000000000220000-0x0000000000230000-memory.dmp

    Filesize

    64KB

  • memory/1508-56-0x0000000000270000-0x0000000000280000-memory.dmp

    Filesize

    64KB

  • memory/1508-57-0x0000000000280000-0x0000000000290000-memory.dmp

    Filesize

    64KB

  • memory/1508-58-0x0000000000290000-0x00000000002A0000-memory.dmp

    Filesize

    64KB

  • memory/1508-59-0x00000000002A0000-0x00000000002B0000-memory.dmp

    Filesize

    64KB

  • memory/1508-60-0x00000000002B0000-0x00000000002C0000-memory.dmp

    Filesize

    64KB

  • memory/1508-61-0x00000000002C0000-0x00000000002D0000-memory.dmp

    Filesize

    64KB

  • memory/1508-62-0x00000000002E0000-0x00000000002F0000-memory.dmp

    Filesize

    64KB

  • memory/1508-63-0x00000000002F0000-0x0000000000300000-memory.dmp

    Filesize

    64KB

  • memory/1508-64-0x0000000000400000-0x000000000044F000-memory.dmp

    Filesize

    316KB