Analysis
-
max time kernel
395s -
max time network
451s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 12:46
Static task
static1
Behavioral task
behavioral1
Sample
ede49abe97d6f0badf4ae93c25b85963a611c138bf6996561f049e3136302c36.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ede49abe97d6f0badf4ae93c25b85963a611c138bf6996561f049e3136302c36.exe
Resource
win10v2004-20221111-en
General
-
Target
ede49abe97d6f0badf4ae93c25b85963a611c138bf6996561f049e3136302c36.exe
-
Size
328KB
-
MD5
5308e99c67ca2233a5bede8d74c158bf
-
SHA1
4b16cb5cf8899147cd5bb82af5d7567d831b8007
-
SHA256
ede49abe97d6f0badf4ae93c25b85963a611c138bf6996561f049e3136302c36
-
SHA512
04f83b08ff965e689f69311d33dc39319f6bb3f2564120a98d3631f88cd581c784c491be96bde78a0aed9735fdfafc47c464b97eed5a59c6b69d6ef6a601ec03
-
SSDEEP
6144:OIWbEGsxdTGzTb1P6LG/J9hS14sCIFQwaEyUNxYrYBei6C3Y6t:OISEGsx68LG/J9h1sQuxYrQUCdt
Malware Config
Signatures
-
Loads dropped DLL 2 IoCs
Processes:
ede49abe97d6f0badf4ae93c25b85963a611c138bf6996561f049e3136302c36.exepid process 1612 ede49abe97d6f0badf4ae93c25b85963a611c138bf6996561f049e3136302c36.exe 1612 ede49abe97d6f0badf4ae93c25b85963a611c138bf6996561f049e3136302c36.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
Processes:
ede49abe97d6f0badf4ae93c25b85963a611c138bf6996561f049e3136302c36.exepid process 1612 ede49abe97d6f0badf4ae93c25b85963a611c138bf6996561f049e3136302c36.exe 1612 ede49abe97d6f0badf4ae93c25b85963a611c138bf6996561f049e3136302c36.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
496KB
MD56a23beb2b76338c8f124532fdd2c652c
SHA118ee40972642312557ac3ba105b21b009ec4fec6
SHA2561d04c205bbdc77fe29505c16c0ba516ad32ce1b2e02de77910bc632d30ea22eb
SHA512caa57a55b18b1479127191d787bf6324ff444437f220f520e7fe1f1594840320c80e52f283408c628771d8399dbc4555a82651df4bcc730e7453d18e39b60f01
-
Filesize
496KB
MD56a23beb2b76338c8f124532fdd2c652c
SHA118ee40972642312557ac3ba105b21b009ec4fec6
SHA2561d04c205bbdc77fe29505c16c0ba516ad32ce1b2e02de77910bc632d30ea22eb
SHA512caa57a55b18b1479127191d787bf6324ff444437f220f520e7fe1f1594840320c80e52f283408c628771d8399dbc4555a82651df4bcc730e7453d18e39b60f01