Analysis

  • max time kernel
    90s
  • max time network
    94s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    22/11/2022, 15:12

General

  • Target

    2a50c6d53c82062183c2de6554b4cbc83245eb4ed40ee0e7937d8b7550d781e8.exe

  • Size

    1.3MB

  • MD5

    26a34d7740626c7c3e985eb6a252cfa0

  • SHA1

    6d5a78659e3245c8dfe04dead078e9e593fa28bf

  • SHA256

    2a50c6d53c82062183c2de6554b4cbc83245eb4ed40ee0e7937d8b7550d781e8

  • SHA512

    f3ac2b5f54557decd26e267f8f88a55bc1b14f6987e45c57b45db0e6cdf3943efcf8d51b7ea5165452caeef10977ba40be5b65522ad6a0081179bcb6bb9438f5

  • SSDEEP

    24576:jrKqlGCPcJKwybUDwEZZODYmR9G+gnbkk6XRJfe3DqYO/KpLwFfngWX4VmJPaka:jrKo4ZwCOnYjVmJPat

Score
5/10

Malware Config

Signatures

  • Suspicious use of SetThreadContext 1 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Suspicious use of SetWindowsHookEx 5 IoCs
  • Suspicious use of WriteProcessMemory 11 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2a50c6d53c82062183c2de6554b4cbc83245eb4ed40ee0e7937d8b7550d781e8.exe
    "C:\Users\Admin\AppData\Local\Temp\2a50c6d53c82062183c2de6554b4cbc83245eb4ed40ee0e7937d8b7550d781e8.exe"
    1⤵
    • Suspicious use of SetThreadContext
    • Suspicious use of WriteProcessMemory
    PID:1168
    • C:\Users\Admin\AppData\Local\Temp\2a50c6d53c82062183c2de6554b4cbc83245eb4ed40ee0e7937d8b7550d781e8.exe
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1996

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1996-54-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/1996-55-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/1996-57-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/1996-59-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/1996-61-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/1996-63-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/1996-65-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/1996-68-0x00000000760E1000-0x00000000760E3000-memory.dmp

    Filesize

    8KB

  • memory/1996-69-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/1996-70-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/1996-71-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/1996-73-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB