Analysis
-
max time kernel
45s -
max time network
51s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system -
submitted
12-10-2022 16:49
Static task
static1
Behavioral task
behavioral1
Sample
f325afd377442f63e75940994a961b7bfb3a47a691b26a7f7b797b7174740181.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f325afd377442f63e75940994a961b7bfb3a47a691b26a7f7b797b7174740181.exe
Resource
win10v2004-20220812-en
General
-
Target
f325afd377442f63e75940994a961b7bfb3a47a691b26a7f7b797b7174740181.exe
-
Size
30KB
-
MD5
66909d135fa8ce92576bc900d2752780
-
SHA1
05b8d47400719f2af141191509fa1d6448754425
-
SHA256
f325afd377442f63e75940994a961b7bfb3a47a691b26a7f7b797b7174740181
-
SHA512
79fed47247b9a2301153ae35442dfe8fc33f98d830abd8a6bac932f8b3828f415ad5167cb519669e6d854aabab77789bdfb18bae09e9afaee584838d9f3fb285
-
SSDEEP
768:k1WSJd8wO8P5qJcLE+lksANtKDC5OheA2vjZSHt:cW4doq5qgE+DANtKGqmvjUHt
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 1500 f325afd377442f63e75940994a961b7bfb3a47a691b26a7f7b797b7174740181.exe -
Drops file in Program Files directory 1 IoCs
description ioc Process File created C:\Program Files\Common Files\Microsoft Shared\MSINFO\atmQQ2.dll f325afd377442f63e75940994a961b7bfb3a47a691b26a7f7b797b7174740181.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1500 f325afd377442f63e75940994a961b7bfb3a47a691b26a7f7b797b7174740181.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\f325afd377442f63e75940994a961b7bfb3a47a691b26a7f7b797b7174740181.exe"C:\Users\Admin\AppData\Local\Temp\f325afd377442f63e75940994a961b7bfb3a47a691b26a7f7b797b7174740181.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
PID:1500
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
76KB
MD55fd585417e87d341919393f1a850c493
SHA1562feeea562e87d32fbca0a90f894254a098f43d
SHA25693d476c08cc35325bbd73e99e28d69614a8b56a3b5110db679a2ccb2669b418f
SHA512c9592f3e31f7ff326dd1e91812f0c46128c02a9969015ea165181bc8c4a51c4377d7e51540d1dfd37b6b5824eb933538cfec1ae7728fbf0a12010fc81aa46ea4