Analysis

  • max time kernel
    43s
  • max time network
    46s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    06/11/2022, 08:10

General

  • Target

    8dead5f956330707bd19cd3ea56fec3dcc172bb7c5192bbee6280d5081254311.exe

  • Size

    344KB

  • MD5

    30258d571aa875077eaa46d038d9f3f6

  • SHA1

    179c38560faaf7087d6abdad5fb2d2ef1107e4fe

  • SHA256

    8dead5f956330707bd19cd3ea56fec3dcc172bb7c5192bbee6280d5081254311

  • SHA512

    519a0402d31c64234f191f8f28f5fbbb4e9a05a8eaf46e5df33a897fe6f41b49f88be5c8811cd98f23bfb75246f16beb72b4abc125b5a776d2ccff876a2c98b8

  • SSDEEP

    6144:hs5fW5ymCZCMld6KK4HLe0vX3MN5zQMaMRXNxOm2Gi5CMRpNyXzkn401:SIomCZCme0lvXgeMdRX0PN4kB1

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8dead5f956330707bd19cd3ea56fec3dcc172bb7c5192bbee6280d5081254311.exe
    "C:\Users\Admin\AppData\Local\Temp\8dead5f956330707bd19cd3ea56fec3dcc172bb7c5192bbee6280d5081254311.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1948

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1948-54-0x00000000764D1000-0x00000000764D3000-memory.dmp

          Filesize

          8KB

        • memory/1948-55-0x00000000003C0000-0x00000000003C4000-memory.dmp

          Filesize

          16KB