Analysis
-
max time kernel
31s -
max time network
34s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
-
submitted
23-11-2022 06:39
General
-
Target
48c3a22f7190227962a2ba7a0f250c77eb538449eca9d605d4611836895436a2.exe
-
Size
1.1MB
-
MD5
9e6e44fca9e9c7cfe569d62e3d453f1d
-
SHA1
5c57a203a325959cbb7ac53bc5caa892cc77a057
-
SHA256
48c3a22f7190227962a2ba7a0f250c77eb538449eca9d605d4611836895436a2
-
SHA512
788a0a4e593dbed17a8763da4969c7624601482566069acfa0681f8be194d547606df16f751e0d135a58bcadff2c663b46565afd31dc328f08062cf74bd8b3e7
-
SSDEEP
24576:yio2C4Tz86EE1by3swR9HrwNmojHuD/bsytUltKo+5+VYrle5sv:U4TzJJm9R9kFTSbNtkwo+5Vrle5a
Score
5/10
Malware Config
Signatures
-
Suspicious use of SetThreadContext 1 IoCs
-
Modifies Internet Explorer settings 1 TTPs 1 IoCs
-
Suspicious use of SetWindowsHookEx 5 IoCs
-
Suspicious use of WriteProcessMemory 11 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\48c3a22f7190227962a2ba7a0f250c77eb538449eca9d605d4611836895436a2.exe"C:\Users\Admin\AppData\Local\Temp\48c3a22f7190227962a2ba7a0f250c77eb538449eca9d605d4611836895436a2.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\48c3a22f7190227962a2ba7a0f250c77eb538449eca9d605d4611836895436a2.exe2⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
972KB
-
Filesize
972KB
-
Filesize
972KB
-
Filesize
972KB
-
Filesize
972KB
-
Filesize
972KB
-
-
Filesize
972KB
-
Filesize
8KB
-
Filesize
972KB
-
Filesize
972KB
-
Filesize
972KB
-
Filesize
972KB