f2b2ac4ed134619e068b19b1224c37c6093a1c167d4c8aa7e02b39910e262001 | Triage

Analysis

max time kernel
43s
max time network
48s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
23-11-2022 09:44

Sharing

Report Analysis Logs

General

Target

f2b2ac4ed134619e068b19b1224c37c6093a1c167d4c8aa7e02b39910e262001.exe
Size

76KB
MD5

06a8790c5e87f5305d4746ced5f2a527
SHA1

f5c2d8fd97e1832c497f09cd14002a30cfe1c318
SHA256

f2b2ac4ed134619e068b19b1224c37c6093a1c167d4c8aa7e02b39910e262001
SHA512

dffb72bdbb429754cc0d40128e9db496283732c80657dc63b499f2ac6219beca232f0ecfd4efef8eecc37d23da668c785417ccaf0b33466a3f06c7c1ef4c53af
SSDEEP

1536:qr2OXLXqckrma9LAq1YmggNb5dcP6+wkZlghesvK9Rc5:qiOXLXqckrN1FR1d6WkZ+1vERg

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 13 IoCs

Processes:

f2b2ac4ed134619e068b19b1224c37c6093a1c167d4c8aa7e02b39910e262001.exe

pid	process
1720	f2b2ac4ed134619e068b19b1224c37c6093a1c167d4c8aa7e02b39910e262001.exe
1720	f2b2ac4ed134619e068b19b1224c37c6093a1c167d4c8aa7e02b39910e262001.exe
1720	f2b2ac4ed134619e068b19b1224c37c6093a1c167d4c8aa7e02b39910e262001.exe
1720	f2b2ac4ed134619e068b19b1224c37c6093a1c167d4c8aa7e02b39910e262001.exe
1720	f2b2ac4ed134619e068b19b1224c37c6093a1c167d4c8aa7e02b39910e262001.exe
1720	f2b2ac4ed134619e068b19b1224c37c6093a1c167d4c8aa7e02b39910e262001.exe
1720	f2b2ac4ed134619e068b19b1224c37c6093a1c167d4c8aa7e02b39910e262001.exe
1720	f2b2ac4ed134619e068b19b1224c37c6093a1c167d4c8aa7e02b39910e262001.exe
1720	f2b2ac4ed134619e068b19b1224c37c6093a1c167d4c8aa7e02b39910e262001.exe
1720	f2b2ac4ed134619e068b19b1224c37c6093a1c167d4c8aa7e02b39910e262001.exe
1720	f2b2ac4ed134619e068b19b1224c37c6093a1c167d4c8aa7e02b39910e262001.exe
1720	f2b2ac4ed134619e068b19b1224c37c6093a1c167d4c8aa7e02b39910e262001.exe
1720	f2b2ac4ed134619e068b19b1224c37c6093a1c167d4c8aa7e02b39910e262001.exe

Suspicious use of SetWindowsHookEx 18 IoCs

Processes:

f2b2ac4ed134619e068b19b1224c37c6093a1c167d4c8aa7e02b39910e262001.exe

pid	process
1720	f2b2ac4ed134619e068b19b1224c37c6093a1c167d4c8aa7e02b39910e262001.exe
1720	f2b2ac4ed134619e068b19b1224c37c6093a1c167d4c8aa7e02b39910e262001.exe
1720	f2b2ac4ed134619e068b19b1224c37c6093a1c167d4c8aa7e02b39910e262001.exe
1720	f2b2ac4ed134619e068b19b1224c37c6093a1c167d4c8aa7e02b39910e262001.exe
1720	f2b2ac4ed134619e068b19b1224c37c6093a1c167d4c8aa7e02b39910e262001.exe
1720	f2b2ac4ed134619e068b19b1224c37c6093a1c167d4c8aa7e02b39910e262001.exe
1720	f2b2ac4ed134619e068b19b1224c37c6093a1c167d4c8aa7e02b39910e262001.exe
1720	f2b2ac4ed134619e068b19b1224c37c6093a1c167d4c8aa7e02b39910e262001.exe
1720	f2b2ac4ed134619e068b19b1224c37c6093a1c167d4c8aa7e02b39910e262001.exe
1720	f2b2ac4ed134619e068b19b1224c37c6093a1c167d4c8aa7e02b39910e262001.exe
1720	f2b2ac4ed134619e068b19b1224c37c6093a1c167d4c8aa7e02b39910e262001.exe
1720	f2b2ac4ed134619e068b19b1224c37c6093a1c167d4c8aa7e02b39910e262001.exe
1720	f2b2ac4ed134619e068b19b1224c37c6093a1c167d4c8aa7e02b39910e262001.exe
1720	f2b2ac4ed134619e068b19b1224c37c6093a1c167d4c8aa7e02b39910e262001.exe
1720	f2b2ac4ed134619e068b19b1224c37c6093a1c167d4c8aa7e02b39910e262001.exe
1720	f2b2ac4ed134619e068b19b1224c37c6093a1c167d4c8aa7e02b39910e262001.exe
1720	f2b2ac4ed134619e068b19b1224c37c6093a1c167d4c8aa7e02b39910e262001.exe
1720	f2b2ac4ed134619e068b19b1224c37c6093a1c167d4c8aa7e02b39910e262001.exe

C:\Users\Admin\AppData\Local\Temp\f2b2ac4ed134619e068b19b1224c37c6093a1c167d4c8aa7e02b39910e262001.exe
"C:\Users\Admin\AppData\Local\Temp\f2b2ac4ed134619e068b19b1224c37c6093a1c167d4c8aa7e02b39910e262001.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:1720

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1720-54-0x00000000765B1000-0x00000000765B3000-memory.dmp

Filesize
8KB

Download
memory/1720-55-0x00000000003E0000-0x00000000003E4000-memory.dmp

Filesize
16KB

Download