Analysis

  • max time kernel
    146s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/11/2022, 19:24

General

  • Target

    0db51851de6f03ca31b0039668e30443de53f8574267bcf7503bd55426d29447.exe

  • Size

    136KB

  • MD5

    0f448681d26fc3af83343a8086de2ab0

  • SHA1

    dd1e874962407916cafbd0590fdbba6330b45668

  • SHA256

    0db51851de6f03ca31b0039668e30443de53f8574267bcf7503bd55426d29447

  • SHA512

    5806c444c40609e0347cdd1b9122dab7ca9f616e168dafcf615d209743780f8fd8cab130b54098761ace7264f5298e3fb149cf65f635d33517aab858e374b261

  • SSDEEP

    1536:b8f7JoI6Xn44Oo2RRRRRR76nZKaQK9XCqvFygF2r5UL5P9ZEUOf/55D39g1T5Na2:AVooPoI6UpKxO62r56nOf/58vlr2G

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Drops file in System32 directory 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0db51851de6f03ca31b0039668e30443de53f8574267bcf7503bd55426d29447.exe
    "C:\Users\Admin\AppData\Local\Temp\0db51851de6f03ca31b0039668e30443de53f8574267bcf7503bd55426d29447.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in System32 directory
    • Suspicious use of SetWindowsHookEx
    PID:5056

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Windows\SysWOW64\rz659335.dll

          Filesize

          80KB

          MD5

          9b02808f4e0b8a5e71a37949b6db062b

          SHA1

          715e45ad25db0fd7d2c1d856906637fd6467715c

          SHA256

          0c8f585418bce392ecbd330bae9a3535a4d92a2c9283e031024612935641cc30

          SHA512

          91844eb4490713c328704a0e4351fbce976a72136622b21f56fd9ae6f821eb5aa445c61ad07d885e67b126a2e66c3bb73d8e90bc305ffb48c94dcac650c6f415

        • memory/5056-132-0x0000000000400000-0x0000000000422000-memory.dmp

          Filesize

          136KB

        • memory/5056-134-0x0000000000400000-0x0000000000422000-memory.dmp

          Filesize

          136KB

        • memory/5056-135-0x0000000010000000-0x0000000010015000-memory.dmp

          Filesize

          84KB