Analysis

  • max time kernel
    66s
  • max time network
    132s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/10/2022, 15:49

General

  • Target

    b7f6f0ade6c2fc2c282643c631f48a1b1233168c7da736d854032d2bf33dcea3.exe

  • Size

    18KB

  • MD5

    66de7b8b5cae957d528202aed803593e

  • SHA1

    e8dfbe0fe7d80927fb370a318fdca1f3e02f2f79

  • SHA256

    b7f6f0ade6c2fc2c282643c631f48a1b1233168c7da736d854032d2bf33dcea3

  • SHA512

    9aa40c5030056d9b6a8cb70e7d095b8a561e25054ef60fbcda4ffdd794f102845dcbcc26af6e93ad1cf133109f9fa350566f8e17133b7dda584564f56931e486

  • SSDEEP

    384:VZ8i63eTypsgyMuMGGFKj5eBz5hcR6Y3bjMdP/C:VZb63eG9hzGGAYXg6YLYN

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b7f6f0ade6c2fc2c282643c631f48a1b1233168c7da736d854032d2bf33dcea3.exe
    "C:\Users\Admin\AppData\Local\Temp\b7f6f0ade6c2fc2c282643c631f48a1b1233168c7da736d854032d2bf33dcea3.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4824

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\350578500.dll

    Filesize

    26KB

    MD5

    f886d37968098153b7c396f43fa700db

    SHA1

    7b19a8e1587d442dace70c4f6be0cb37daa363e3

    SHA256

    2142077790f7233f4d0f4ccd0d7edda48bd4aef8398cfc8a2530238d3fbf003b

    SHA512

    ff1c200958ed582e600bb68c385ac7f6288e7983b1d16b0149c4bbddc2646c7160c43067e299114bd0175cb4f80319c662b4c31ef9430cb889f2e03a4cd4e7fd

  • memory/4824-132-0x0000000000400000-0x0000000000410000-memory.dmp

    Filesize

    64KB

  • memory/4824-134-0x0000000000400000-0x0000000000410000-memory.dmp

    Filesize

    64KB