Analysis
- max time kernel
146s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20220812-en - resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system - submitted
06/11/2022, 19:24
Static task
static1
Behavioral task
behavioral1
Sample
0db51851de6f03ca31b0039668e30443de53f8574267bcf7503bd55426d29447.exe
Resource
win7-20220812-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
0db51851de6f03ca31b0039668e30443de53f8574267bcf7503bd55426d29447.exe
Resource
win10v2004-20220812-en
3 signatures
150 seconds
General
- Target 0db51851de6f03ca31b0039668e30443de53f8574267bcf7503bd55426d29447.exe
- Size 136KB
- Sample221106-x4dacsbcfm
- SHA256 0db51851de6f03ca31b0039668e30443de53f8574267bcf7503bd55426d29447
- MD5 0f448681d26fc3af83343a8086de2ab0
- SHA1 dd1e874962407916cafbd0590fdbba6330b45668
- SHA512 5806c444c40609e0347cdd1b9122dab7ca9f616e168dafcf615d209743780f8fd8cab130b54098761ace7264f5298e3fb149cf65f635d33517aab858e374b261
- SSDEEP 1536:b8f7JoI6Xn44Oo2RRRRRR76nZKaQK9XCqvFygF2r5UL5P9ZEUOf/55D39g1T5Na2:AVooPoI6UpKxO62r56nOf/58vlr2G
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 1 IoCs
pid Process 5056 0db51851de6f03ca31b0039668e30443de53f8574267bcf7503bd55426d29447.exe - Drops file in System32 directory 2 IoCs
description ioc Process File created C:\Windows\SysWOW64\rz659335.dl_ 0db51851de6f03ca31b0039668e30443de53f8574267bcf7503bd55426d29447.exe File created C:\Windows\SysWOW64\rz659335.dll 0db51851de6f03ca31b0039668e30443de53f8574267bcf7503bd55426d29447.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 5056 0db51851de6f03ca31b0039668e30443de53f8574267bcf7503bd55426d29447.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\0db51851de6f03ca31b0039668e30443de53f8574267bcf7503bd55426d29447.exe"C:\Users\Admin\AppData\Local\Temp\0db51851de6f03ca31b0039668e30443de53f8574267bcf7503bd55426d29447.exe"1⤵
- Loads dropped DLL
- Drops file in System32 directory
- Suspicious use of SetWindowsHookEx
PID:5056
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Windows\SysWOW64\rz659335.dll
- Size 80KB
- SHA256 0c8f585418bce392ecbd330bae9a3535a4d92a2c9283e031024612935641cc30
- MD5 9b02808f4e0b8a5e71a37949b6db062b
- SHA1 715e45ad25db0fd7d2c1d856906637fd6467715c
- SHA512 91844eb4490713c328704a0e4351fbce976a72136622b21f56fd9ae6f821eb5aa445c61ad07d885e67b126a2e66c3bb73d8e90bc305ffb48c94dcac650c6f415
- SSDEEP 1536:eblEy9RO6DiYi5ZAde7KW52qWTOt5ZOZTnJ7rCNxicMiWZR:ehRO6DHN27vWaZOp4NxictWL
- MD5 SHA1 SHA512 SSDEEP