Analysis

  • max time kernel
    22s
  • max time network
    85s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    29-10-2022 02:13

General

  • Target

    bde3a8dea218e15774388024882f6d516cfb90ebae7d2555e4e4e477a1601c9f.exe

  • Size

    372KB

  • MD5

    1fbc0dd1992a06110f9683c993795539

  • SHA1

    4b1f22b92da73d097ba32697594bc6d5640cee7b

  • SHA256

    bde3a8dea218e15774388024882f6d516cfb90ebae7d2555e4e4e477a1601c9f

  • SHA512

    3a4458558cdc08504cdfa92c07da8d91288ba2cdb99eabef53ad04d49712e218d1080f7e3b6d7721e731bbd8e4bc235fcfd6c75bc9a02a86b7e15c11a3471466

  • SSDEEP

    6144:VyuuGAXCBlSUNZ5k1b6IRvsAGWDWaDHJb9thxL+NFBoS1wf28kXTiVQdbMj8ABcf:VyuWXC3SsZ5k1b6wjWQpfxKNXJTXTyAx

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\bde3a8dea218e15774388024882f6d516cfb90ebae7d2555e4e4e477a1601c9f.exe
    "C:\Users\Admin\AppData\Local\Temp\bde3a8dea218e15774388024882f6d516cfb90ebae7d2555e4e4e477a1601c9f.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1464
    • C:\ProgramData\F4D55F6500014973000CA680B4EB2331\F4D55F6500014973000CA680B4EB2331.exe
      "C:\ProgramData\F4D55F6500014973000CA680B4EB2331\F4D55F6500014973000CA680B4EB2331.exe" "C:\Users\Admin\AppData\Local\Temp\bde3a8dea218e15774388024882f6d516cfb90ebae7d2555e4e4e477a1601c9f.exe"
      2⤵
        PID:1424

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\ProgramData\F4D55F6500014973000CA680B4EB2331\F4D55F6500014973000CA680B4EB2331.exe

      Filesize

      29KB

      MD5

      93841717ed45fe3d196b2a831a52aa1f

      SHA1

      1651f268ad3be1ab7612eb0718bb882c4c730046

      SHA256

      b0cb22731d85a9f7745338138452e6d85c14f451cf4ea3e91df9b7414512af50

      SHA512

      3f277e5765ca189212db24af7f43748988ff839134a5a52de453afafc20555e1eb5e8d70ebe29425a35fec7afef102d3c720e5aa334af75b217b04c60946abb1

    • C:\ProgramData\F4D55F6500014973000CA680B4EB2331\F4D55F6500014973000CA680B4EB2331.exe

      Filesize

      19KB

      MD5

      e6435d0e83822c21bc259bdeba606a9f

      SHA1

      d1e2bdc4ef2e0ab385ca48c7c3d07c591cdb3292

      SHA256

      10fa9d1c3bfafce7ca2db01844871bb29be2423b677c94355b11dee28b5708f0

      SHA512

      c2a337e54c0ec1cdc655a8d430252be15c1f195ba6c43162f32b63e049cd9dd2faa96f23c9f0af1ca3cce86ece6607d7d30e42ee5b550a5b8506f5c0cf8862bc

    • \ProgramData\F4D55F6500014973000CA680B4EB2331\F4D55F6500014973000CA680B4EB2331.exe

      Filesize

      15KB

      MD5

      9b83d784cd31b1cd886dbb5df32a3004

      SHA1

      1fb759e04bacc312cd96efc5e6e36d11f67a7fee

      SHA256

      07f220fc9cb4ab7030fc660dad1314a7e667c51f96b93a97de1f597ac7ad2377

      SHA512

      331e73f103297eed9833e5d3f7a30208e8a2a888e94bea65624d0a38352d489f23f8a7b5d3c1e10351f440685559256eb579f7b9c3d429835724a69236c662d0

    • \ProgramData\F4D55F6500014973000CA680B4EB2331\F4D55F6500014973000CA680B4EB2331.exe

      Filesize

      37KB

      MD5

      cffd7909a5deff53ddc9c0c2c44510df

      SHA1

      8ad4f0e0125003c7a599860d7e9a78f99c0587b2

      SHA256

      65084039a9132bb54d2d3637720e772e7f80128f76bc6f0276439aad1f558416

      SHA512

      6960badddf34131e067cf846788ef99d39e2b5ba4ebe4112878e664e785b1e4fe42cd43aec7c2ca823929e22b7df9149cdf1934bcd93cac29da68f5d3102bc7b

    • memory/1424-62-0x0000000000400000-0x00000000004BD000-memory.dmp

      Filesize

      756KB

    • memory/1464-54-0x0000000075DA1000-0x0000000075DA3000-memory.dmp

      Filesize

      8KB

    • memory/1464-55-0x0000000000400000-0x00000000004BD000-memory.dmp

      Filesize

      756KB