Analysis

  • max time kernel
    195s
  • max time network
    252s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/10/2022, 01:59

General

  • Target

    4a1fb995a7af4898b9f498ffd11270d2b040c8c052b461a7ba4aa7ac90a3ca55.exe

  • Size

    422KB

  • MD5

    84a032b719c7ce454932804898234b2c

  • SHA1

    1402781203a6b5522d8b6e4a1c376299c2bbb576

  • SHA256

    4a1fb995a7af4898b9f498ffd11270d2b040c8c052b461a7ba4aa7ac90a3ca55

  • SHA512

    0b14f0f52b99d16a4e382245dcae4ae234cf02d2354e8830bf202a819defd6291d0b7c3abd6a371868fb97923ffa545bc760e14cd476e34f0bf19274dea3b91d

  • SSDEEP

    12288:KqYt4Crq4fUmaJFZslrU8G2k7DpTMlkHtS7:KqY2CrqC/pU8MxTRHtE

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Drops file in System32 directory 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4a1fb995a7af4898b9f498ffd11270d2b040c8c052b461a7ba4aa7ac90a3ca55.exe
    "C:\Users\Admin\AppData\Local\Temp\4a1fb995a7af4898b9f498ffd11270d2b040c8c052b461a7ba4aa7ac90a3ca55.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in System32 directory
    • Suspicious use of SetWindowsHookEx
    PID:1396

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Windows\SysWOW64\wmimgr32.dll

    Filesize

    23KB

    MD5

    9ebb3e4fc0c32524ba4098e214a06150

    SHA1

    41d0964a70edc0875ff9a8091b6911e18684e1ed

    SHA256

    f183002d0c6412dc694b580e0b33194766921415e77f713d46cb29dac6ae196d

    SHA512

    d7338292e03fd374fec772787e7561a6d6e9ca0b108cf4b6e9f79647bf0f64960ec78979e986f8bfa9874d907ecacca81183faacdd350e890c0dab02ca50298a

  • memory/1396-133-0x0000000000400000-0x000000000046F000-memory.dmp

    Filesize

    444KB