Analysis

  • max time kernel
    37s
  • max time network
    50s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    23-11-2022 09:59

General

  • Target

    c4ef80f413471591f7f6c9f3d1eaa581ff49ce60f79770c6ebf003e205d57e2f.exe

  • Size

    1.3MB

  • MD5

    1ca053c0a8b61b64ebd7a52c4cce80e2

  • SHA1

    892f117f34c14dbbc143b6c7e6a2a77abf40a9cb

  • SHA256

    c4ef80f413471591f7f6c9f3d1eaa581ff49ce60f79770c6ebf003e205d57e2f

  • SHA512

    4a5d1e2f8c665e2c007d2954938b6c8d544de5d81cc5420f5e32149ed6cc76c7fd0c1da4295020f1e04931f8d1c13e4b7cf4050c4fd5a7421d3181b32b3671a8

  • SSDEEP

    24576:7rKqlGCPcJKwybUDwEZZODYmR9G+gnbkk6XRJfe3DqYO/KpLwFfngWX4VmJPak:7rKo4ZwCOnYjVmJPa

Score
5/10

Malware Config

Signatures

  • Suspicious use of SetThreadContext 1 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Suspicious use of SetWindowsHookEx 5 IoCs
  • Suspicious use of WriteProcessMemory 11 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c4ef80f413471591f7f6c9f3d1eaa581ff49ce60f79770c6ebf003e205d57e2f.exe
    "C:\Users\Admin\AppData\Local\Temp\c4ef80f413471591f7f6c9f3d1eaa581ff49ce60f79770c6ebf003e205d57e2f.exe"
    1⤵
    • Suspicious use of SetThreadContext
    • Suspicious use of WriteProcessMemory
    PID:1664
    • C:\Users\Admin\AppData\Local\Temp\c4ef80f413471591f7f6c9f3d1eaa581ff49ce60f79770c6ebf003e205d57e2f.exe
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1760

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1760-54-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/1760-55-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/1760-57-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/1760-59-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/1760-61-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/1760-63-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/1760-65-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/1760-66-0x000000000044E057-mapping.dmp

  • memory/1760-68-0x0000000076181000-0x0000000076183000-memory.dmp

    Filesize

    8KB

  • memory/1760-69-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/1760-70-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/1760-71-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB