Analysis

  • max time kernel
    106s
  • max time network
    99s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    23-11-2022 10:02

General

  • Target

    83b732e135b391d4788b7e3e5601ef4ba0e571c0370c18858a2e407fca03950b.exe

  • Size

    4.7MB

  • MD5

    32cd882b884cbe8807f2e1da892532fd

  • SHA1

    e4829520ea3368a24eeb14a757ee5f948ccd32ef

  • SHA256

    83b732e135b391d4788b7e3e5601ef4ba0e571c0370c18858a2e407fca03950b

  • SHA512

    877ba49948e8a242cf8d2277bfe39f2e7500e0e80f9e6fb24f9f3d338ae974f68d6889498d16308f97ca1eba67ed710ae760a19765a7160ea6ecf5164353e44d

  • SSDEEP

    98304:eQapv5KpVHFIG6IOpaP7MXcgKAFOZZhT+5d6qXO8xbNEAMTAbGM:eQaivHFtApKctdpdbNd0AbG

Score
8/10

Malware Config

Signatures

  • Disables Task Manager via registry modification
  • Adds Run key to start application 2 TTPs 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\83b732e135b391d4788b7e3e5601ef4ba0e571c0370c18858a2e407fca03950b.exe
    "C:\Users\Admin\AppData\Local\Temp\83b732e135b391d4788b7e3e5601ef4ba0e571c0370c18858a2e407fca03950b.exe"
    1⤵
    • Adds Run key to start application
    • Suspicious use of SetWindowsHookEx
    PID:1352

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1352-54-0x0000000075B51000-0x0000000075B53000-memory.dmp

    Filesize

    8KB