Analysis
-
max time kernel
142s -
max time network
46s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
20/10/2022, 05:05
General
-
Target
b4a5b5a214f550a5fcad856a883481676bc2e1a2488dd6bb507b07a9f68c8474.exe
-
Size
52KB
-
MD5
4f960c8e19a859138553b05e26a639c2
-
SHA1
3fef6d11f6d3481c9a8dd28194cb745ee83cab7f
-
SHA256
b4a5b5a214f550a5fcad856a883481676bc2e1a2488dd6bb507b07a9f68c8474
-
SHA512
b554362651364060f7c1fb91f15e18191bebcbb724c6a6b614b74df0fbdb2febefcf0e817d1bb15f766f292cbfe593e41a8d86a58346be278a800b33bd15ac2e
-
SSDEEP
768:HxudNb/w825lmFSFKZxE5eiJTNdQJpdEf:H8wl5lmE2xEvJDQ7dQ
Score
7/10
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
-
Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵
-
C:\Users\Admin\AppData\Local\Temp\b4a5b5a214f550a5fcad856a883481676bc2e1a2488dd6bb507b07a9f68c8474.exe"C:\Users\Admin\AppData\Local\Temp\b4a5b5a214f550a5fcad856a883481676bc2e1a2488dd6bb507b07a9f68c8474.exe"2⤵
- Loads dropped DLL
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
9KB
MD50adb6f82125d3cb830a532da154677f0
SHA1b1abad527ee1ed71bd4f00e1bb01214185398efb
SHA2563449618ca5da3813402d38b8890462af1c90d8a991583e4c0492c3a81b60f425
SHA512199060e350c1101f138d6b2151fc465e930eed495af77aaeaab837b10ca6d1fc113e32be51b5abe9b9d6c00dc73edf2d80ce720e99aabb8cd60ceae458c640fc
-
Filesize
8KB
-
Filesize
16KB
-
Filesize
52KB
-
Filesize
52KB