Analysis
-
max time kernel
98s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
31-10-2022 01:05
Static task
static1
Behavioral task
behavioral1
Sample
f1530f639816538944bd11d7c02f7d0fd870752884f367bfe96a02752bfcfabb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f1530f639816538944bd11d7c02f7d0fd870752884f367bfe96a02752bfcfabb.exe
Resource
win10v2004-20220812-en
General
-
Target
f1530f639816538944bd11d7c02f7d0fd870752884f367bfe96a02752bfcfabb.exe
-
Size
595KB
-
MD5
a1f80d64e575674c7fe6c880640cfce0
-
SHA1
e31956c92089bf5e7f1e56a1392cd03b5a976955
-
SHA256
f1530f639816538944bd11d7c02f7d0fd870752884f367bfe96a02752bfcfabb
-
SHA512
6e0b4b422282e93d3744eb414856a699ecb98c8f49de0304adc291d003a2618c43cb38549b42f3176a474ec64952b2cb74c834e9b4bffe1e94e8c24ae5219cf2
-
SSDEEP
12288:ThtgUFNxrky36qrfMxUX/J7VAzuaNKh+RvE5ituN2h5txJLeJBF0He:ThNNY+6qrfhkvKkVE0tuN2hvCJH0He
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 4332 f1530f639816538944bd11d7c02f7d0fd870752884f367bfe96a02752bfcfabb.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 4332 f1530f639816538944bd11d7c02f7d0fd870752884f367bfe96a02752bfcfabb.exe 4332 f1530f639816538944bd11d7c02f7d0fd870752884f367bfe96a02752bfcfabb.exe 4332 f1530f639816538944bd11d7c02f7d0fd870752884f367bfe96a02752bfcfabb.exe 4332 f1530f639816538944bd11d7c02f7d0fd870752884f367bfe96a02752bfcfabb.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.1MB
MD53fe72f93ab5f24a0ea2d753013a41c4b
SHA19206cd206c0b2782a2b1ad1d19ace97bae6e491e
SHA256db32e8ea1d91009ca25b79d7e863a08be56632641a7a145326fbfbf0931b6c79
SHA51224ce75304e6b5508d9bbf425a68b1907bc51f30c168dd3b800f34e1f7fc1aee044818848d1fde40e7556af5f16f94ea02d19344bd9ffda1a6d011a624d6f46e9