Analysis
-
max time kernel
146s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
06/11/2022, 19:24
Static task
static1
Behavioral task
behavioral1
Sample
0db51851de6f03ca31b0039668e30443de53f8574267bcf7503bd55426d29447.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0db51851de6f03ca31b0039668e30443de53f8574267bcf7503bd55426d29447.exe
Resource
win10v2004-20220812-en
General
-
Target
0db51851de6f03ca31b0039668e30443de53f8574267bcf7503bd55426d29447.exe
-
Size
136KB
-
MD5
0f448681d26fc3af83343a8086de2ab0
-
SHA1
dd1e874962407916cafbd0590fdbba6330b45668
-
SHA256
0db51851de6f03ca31b0039668e30443de53f8574267bcf7503bd55426d29447
-
SHA512
5806c444c40609e0347cdd1b9122dab7ca9f616e168dafcf615d209743780f8fd8cab130b54098761ace7264f5298e3fb149cf65f635d33517aab858e374b261
-
SSDEEP
1536:b8f7JoI6Xn44Oo2RRRRRR76nZKaQK9XCqvFygF2r5UL5P9ZEUOf/55D39g1T5Na2:AVooPoI6UpKxO62r56nOf/58vlr2G
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 5056 0db51851de6f03ca31b0039668e30443de53f8574267bcf7503bd55426d29447.exe -
Drops file in System32 directory 2 IoCs
description ioc Process File created C:\Windows\SysWOW64\rz659335.dl_ 0db51851de6f03ca31b0039668e30443de53f8574267bcf7503bd55426d29447.exe File created C:\Windows\SysWOW64\rz659335.dll 0db51851de6f03ca31b0039668e30443de53f8574267bcf7503bd55426d29447.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 5056 0db51851de6f03ca31b0039668e30443de53f8574267bcf7503bd55426d29447.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\0db51851de6f03ca31b0039668e30443de53f8574267bcf7503bd55426d29447.exe"C:\Users\Admin\AppData\Local\Temp\0db51851de6f03ca31b0039668e30443de53f8574267bcf7503bd55426d29447.exe"1⤵
- Loads dropped DLL
- Drops file in System32 directory
- Suspicious use of SetWindowsHookEx
PID:5056
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
80KB
MD59b02808f4e0b8a5e71a37949b6db062b
SHA1715e45ad25db0fd7d2c1d856906637fd6467715c
SHA2560c8f585418bce392ecbd330bae9a3535a4d92a2c9283e031024612935641cc30
SHA51291844eb4490713c328704a0e4351fbce976a72136622b21f56fd9ae6f821eb5aa445c61ad07d885e67b126a2e66c3bb73d8e90bc305ffb48c94dcac650c6f415