Analysis
-
max time kernel
145s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
02-11-2022 22:26
General
-
Target
20969269adc080956a4cd02a16232ff53740250d359663794193a36dda894404.exe
-
Size
2.9MB
-
MD5
16e0c05e191f34701635f175d184275d
-
SHA1
199a07363ce95840eee2ca5f7a15ef94af945b00
-
SHA256
20969269adc080956a4cd02a16232ff53740250d359663794193a36dda894404
-
SHA512
8cc7e360cd7e4ce059225a72683c895c326812c711ccaba25ec919a9270c1780c1cdb793de70a428ce87afc933db1c22d524099350eca054ed9d20475ce349f3
-
SSDEEP
49152:qXmUHHzgOvLiWxkXd/5Ffsy3qTeVOKMFSqhPI0qObaNkzwFn04g1:q2WH02LmzFffIetMFSqhPI0JbO3g1
Score
8/10
Malware Config
Signatures
-
Downloads MZ/PE file
-
Drops file in System32 directory 1 IoCs
-
Drops file in Windows directory 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\20969269adc080956a4cd02a16232ff53740250d359663794193a36dda894404.exe"C:\Users\Admin\AppData\Local\Temp\20969269adc080956a4cd02a16232ff53740250d359663794193a36dda894404.exe"1⤵
- Drops file in System32 directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: RenamesItself
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
9.8MB
-
Filesize
9.8MB
-
Filesize
9.8MB