Analysis
-
max time kernel
5s -
max time network
93s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
28/10/2022, 21:57
Static task
static1
Behavioral task
behavioral1
Sample
194b5a1b9b59b72bdc812341178c8fd2cfda256e199b19936d0122e3f8598f18.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
194b5a1b9b59b72bdc812341178c8fd2cfda256e199b19936d0122e3f8598f18.exe
Resource
win10v2004-20220812-en
General
-
Target
194b5a1b9b59b72bdc812341178c8fd2cfda256e199b19936d0122e3f8598f18.exe
-
Size
84KB
-
MD5
0c5128c21d0c67bd6d48f71877960300
-
SHA1
60845650b033ea94df071102c8891b98c38668e8
-
SHA256
194b5a1b9b59b72bdc812341178c8fd2cfda256e199b19936d0122e3f8598f18
-
SHA512
5c7eb06c538b0538fe0633c441bd79882131d702ec57902120e62138ee0e66c51f20ae853a6f0b355282e05beec88277b900f974ab2fda20c38597257a7df58a
-
SSDEEP
768:d6fmuec4OdJNUC1x2avPPpykILkGuIBLP3nqZCcLX/CVSFJ0T72Uap5/7TONS9:d/ZOdUCJwVuTocTzFJ0T72VpN9
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 848 194b5a1b9b59b72bdc812341178c8fd2cfda256e199b19936d0122e3f8598f18.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\194b5a1b9b59b72bdc812341178c8fd2cfda256e199b19936d0122e3f8598f18.exe"C:\Users\Admin\AppData\Local\Temp\194b5a1b9b59b72bdc812341178c8fd2cfda256e199b19936d0122e3f8598f18.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:848 -
C:\Users\Admin\liayao.exe"C:\Users\Admin\liayao.exe"2⤵PID:3464
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
19KB
MD59779ea06feaf9974856e91b28e477138
SHA17a2ccbc51fcfabe80524edbe4419dae57f17171b
SHA2563fb06e516f85243288850d4c6c3de16a77cdb6215505a29df2da6cc4540336ce
SHA5129109f99e1760ae9d5d079bf74409ecc2d29312b4d46cd8aea2340aa8fdea20283130c94472ead969cb098b9bb5e5cf16f2a85ed022a6a0af3865b543ee6a9983
-
Filesize
32KB
MD5ee4f66134eecc34daa5ac1f6e6c658fd
SHA1ebff2ffd6f73feb2cb182f27a89335362024c986
SHA2566b7bcd1431b2dc56d9cc713853e957586732a19e93dc1738487dd2ee7be34930
SHA51206f6942f822a563e4dc36b0a31d9a1e6f19f7dc02f7b50f48e7544cb109f88f0d720852c163fd9b5dd943bc9c3f8f0f905903e12bcd0406a133d58af96e0c2b1