Analysis

  • max time kernel
    176s
  • max time network
    186s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/10/2022, 17:11

General

  • Target

    19c2a1a5a01b9b059f03cd40cec91d43fb9db4fae121b305e1e8189db955d6b1.exe

  • Size

    65KB

  • MD5

    8466ff1422b4a1dbb9bf667c1e50c3d0

  • SHA1

    011dc775323178b0e1747268121a94f29aba2839

  • SHA256

    19c2a1a5a01b9b059f03cd40cec91d43fb9db4fae121b305e1e8189db955d6b1

  • SHA512

    2da451757ea9415317bd9c2769e15cd56c67610771be315e4ca869072b19862e3b754cf98a30e9e503c9fb21264b113d3d4dbd19168855e0587309c706129521

  • SSDEEP

    1536:rqEZK/awchU32zX2eaGHYjNkza4/3Psl5Ibb3bH:rqE0kC2zaGHYjB4sl5k

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Drops file in System32 directory 4 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\19c2a1a5a01b9b059f03cd40cec91d43fb9db4fae121b305e1e8189db955d6b1.exe
    "C:\Users\Admin\AppData\Local\Temp\19c2a1a5a01b9b059f03cd40cec91d43fb9db4fae121b305e1e8189db955d6b1.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in System32 directory
    • Suspicious use of SetWindowsHookEx
    PID:1088

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Windows\SysWOW64\wmimgr32.dll

    Filesize

    23KB

    MD5

    9ebb3e4fc0c32524ba4098e214a06150

    SHA1

    41d0964a70edc0875ff9a8091b6911e18684e1ed

    SHA256

    f183002d0c6412dc694b580e0b33194766921415e77f713d46cb29dac6ae196d

    SHA512

    d7338292e03fd374fec772787e7561a6d6e9ca0b108cf4b6e9f79647bf0f64960ec78979e986f8bfa9874d907ecacca81183faacdd350e890c0dab02ca50298a

  • memory/1088-132-0x0000000001000000-0x0000000001013000-memory.dmp

    Filesize

    76KB

  • memory/1088-134-0x0000000001000000-0x0000000001013000-memory.dmp

    Filesize

    76KB