Analysis

  • max time kernel
    36s
  • max time network
    42s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    01/10/2022, 19:13

General

  • Target

    a87ade15fdadcdf157bbaecca6658beea4964cdf2359789d12fb5c2d39b7c247.exe

  • Size

    132KB

  • MD5

    569884b24b3a48a7283a36027dbbd0bf

  • SHA1

    24514373a752bd755d3e9d185986221b5cfd6859

  • SHA256

    a87ade15fdadcdf157bbaecca6658beea4964cdf2359789d12fb5c2d39b7c247

  • SHA512

    af057bde22eb4db6b22ba2f970a99f4a4bdc1aa85a3259be074e7ef5aaedaa4bcc4630839babb385d48d30d567ec9370fdcb8c823e0f0470d574248e970b5e6e

  • SSDEEP

    1536:DnxxQWRT5e6K2DxdzKCJTAS5Q/+4xvgtYQIo9tXoGzX/nnRcymY:DnxSH2Dxdz38R/IOQIoUcnRcymY

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a87ade15fdadcdf157bbaecca6658beea4964cdf2359789d12fb5c2d39b7c247.exe
    "C:\Users\Admin\AppData\Local\Temp\a87ade15fdadcdf157bbaecca6658beea4964cdf2359789d12fb5c2d39b7c247.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1976

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1976-54-0x0000000000220000-0x0000000000230000-memory.dmp

          Filesize

          64KB

        • memory/1976-55-0x0000000000230000-0x0000000000240000-memory.dmp

          Filesize

          64KB

        • memory/1976-56-0x0000000000240000-0x0000000000250000-memory.dmp

          Filesize

          64KB

        • memory/1976-57-0x0000000000250000-0x0000000000260000-memory.dmp

          Filesize

          64KB

        • memory/1976-58-0x0000000000350000-0x0000000000360000-memory.dmp

          Filesize

          64KB

        • memory/1976-59-0x00000000003E0000-0x00000000003F0000-memory.dmp

          Filesize

          64KB

        • memory/1976-60-0x00000000003F0000-0x0000000000400000-memory.dmp

          Filesize

          64KB

        • memory/1976-61-0x0000000000420000-0x0000000000430000-memory.dmp

          Filesize

          64KB

        • memory/1976-62-0x0000000000430000-0x0000000000440000-memory.dmp

          Filesize

          64KB