Analysis

  • max time kernel
    152s
  • max time network
    41s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    23-11-2022 11:06

General

  • Target

    f20277de0582abb21c522c230f682753eeef34a26af847ced8ce00cc20632f31.exe

  • Size

    278KB

  • MD5

    742c4bedcad362e39748af341128892c

  • SHA1

    da22364964abef4e9f745e5bb5c7253e4509c4c0

  • SHA256

    f20277de0582abb21c522c230f682753eeef34a26af847ced8ce00cc20632f31

  • SHA512

    5eb507969919d133277df858c4e0b7b0b9d47aa966b66cb7759edbeaf49c3fdc459c132c2464942993f0889b3be6b6c3b6e27e59d26619c2ae1213dfbad59bf0

  • SSDEEP

    6144:n7sW/AIBMrmB9rDBKtadtVgRbaW2B3pSlSXtlX:7dAIBvHrDBKodtVgRbaWAPdt

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f20277de0582abb21c522c230f682753eeef34a26af847ced8ce00cc20632f31.exe
    "C:\Users\Admin\AppData\Local\Temp\f20277de0582abb21c522c230f682753eeef34a26af847ced8ce00cc20632f31.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2040

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2040-54-0x000000007EF50000-0x000000007EFAC000-memory.dmp
    Filesize

    368KB

  • memory/2040-55-0x000000007EF50000-0x000000007EFAC000-memory.dmp
    Filesize

    368KB

  • memory/2040-56-0x000000007EF50000-0x000000007EFAC000-memory.dmp
    Filesize

    368KB

  • memory/2040-57-0x000000007EF50000-0x000000007EFAC000-memory.dmp
    Filesize

    368KB

  • memory/2040-58-0x000000007EF50000-0x000000007EFAC000-memory.dmp
    Filesize

    368KB

  • memory/2040-59-0x000000007EF50000-0x000000007EFAC000-memory.dmp
    Filesize

    368KB

  • memory/2040-60-0x00000000761E1000-0x00000000761E3000-memory.dmp
    Filesize

    8KB

  • memory/2040-61-0x000000007EF50000-0x000000007EFAC000-memory.dmp
    Filesize

    368KB

  • memory/2040-62-0x000000007EF50000-0x000000007EFAC000-memory.dmp
    Filesize

    368KB

  • memory/2040-63-0x0000000000401000-0x000000000047A000-memory.dmp
    Filesize

    484KB

  • memory/2040-66-0x0000000000400000-0x000000000047C000-memory.dmp
    Filesize

    496KB

  • memory/2040-67-0x000000007EF50000-0x000000007EFAC000-memory.dmp
    Filesize

    368KB