Analysis

  • max time kernel
    45s
  • max time network
    51s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    12-10-2022 16:49

General

  • Target

    f325afd377442f63e75940994a961b7bfb3a47a691b26a7f7b797b7174740181.exe

  • Size

    30KB

  • MD5

    66909d135fa8ce92576bc900d2752780

  • SHA1

    05b8d47400719f2af141191509fa1d6448754425

  • SHA256

    f325afd377442f63e75940994a961b7bfb3a47a691b26a7f7b797b7174740181

  • SHA512

    79fed47247b9a2301153ae35442dfe8fc33f98d830abd8a6bac932f8b3828f415ad5167cb519669e6d854aabab77789bdfb18bae09e9afaee584838d9f3fb285

  • SSDEEP

    768:k1WSJd8wO8P5qJcLE+lksANtKDC5OheA2vjZSHt:cW4doq5qgE+DANtKGqmvjUHt

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Drops file in Program Files directory 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f325afd377442f63e75940994a961b7bfb3a47a691b26a7f7b797b7174740181.exe
    "C:\Users\Admin\AppData\Local\Temp\f325afd377442f63e75940994a961b7bfb3a47a691b26a7f7b797b7174740181.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in Program Files directory
    • Suspicious use of SetWindowsHookEx
    PID:1500

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Program Files\Common Files\Microsoft Shared\MSInfo\atmQQ2.dll

    Filesize

    76KB

    MD5

    5fd585417e87d341919393f1a850c493

    SHA1

    562feeea562e87d32fbca0a90f894254a098f43d

    SHA256

    93d476c08cc35325bbd73e99e28d69614a8b56a3b5110db679a2ccb2669b418f

    SHA512

    c9592f3e31f7ff326dd1e91812f0c46128c02a9969015ea165181bc8c4a51c4377d7e51540d1dfd37b6b5824eb933538cfec1ae7728fbf0a12010fc81aa46ea4

  • memory/1500-54-0x0000000075D71000-0x0000000075D73000-memory.dmp

    Filesize

    8KB

  • memory/1500-56-0x0000000000400000-0x000000000042F000-memory.dmp

    Filesize

    188KB