Overview

overview

1

Static

static

Trojan-Ran...er.exe

windows7-x64

1

Trojan-Ran...er.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    98s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    06/11/2022, 16:29

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Trojan-Ransom.Win32.Blocker.exe

  • Size

    112KB

  • MD5

    83e87fa7ef0b252d898557483c2a9bbf

  • SHA1

    63af5ead409a12d071cd51a8a17c62ec82487cbd

  • SHA256

    d3920b96d3ac2acd9e6b8feaac219630654e30f993d7ba992eb4f502075205ba

  • SHA512

    fab6a1bfd410c7df4782e2c3983c2ef356649b1a535e8fe073d0b26fe64e7a941bcf2b75004eed58008630d02bc9ea41b999fb668153a14a61ba782e7e8ca762

  • SSDEEP

    3072:dyAuNUt8WwnDHKDzLRUbxbznrxTy7VDHbQuZ8wzxJsUBXCOk7/gugPPK:aNUtXwDqnyNzrVax71i0xJsUBXNk7/g4

Score
1/10

Malware Config

Signatures

  • Modifies registry class 3 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Trojan-Ransom.Win32.Blocker.exe
    "C:\Users\Admin\AppData\Local\Temp\Trojan-Ransom.Win32.Blocker.exe"
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:1220

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1220-56-0x0000000075141000-0x0000000075143000-memory.dmp

    Filesize

    8KB

    Download