Analysis

  • max time kernel
    119s
  • max time network
    208s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    23-11-2022 13:46

General

  • Target

    3b3d63b72f47e9aff0947776d7d0492ea064067ceb59c447aeed41c1568947f0.exe

  • Size

    1.3MB

  • MD5

    46dbda8c883bd7304287a4df4f901143

  • SHA1

    9ac4c5f2146f75d1dc235c470b8efafa8faaba2f

  • SHA256

    3b3d63b72f47e9aff0947776d7d0492ea064067ceb59c447aeed41c1568947f0

  • SHA512

    b1cd07a5184704956beb7b9aa2a1b70482d38568b66a37765cb0d546a03095b44f494cb550a0c9b704a1f06e9d8c4d0441dc36bfcf65adeabfaff86d6472ec2e

  • SSDEEP

    24576:brKqlGCPcJKwybUDwEZZODYmR9G+gnbkk6XRJfe3DqYO/KpLwFfngWX4VmJPakV:brKo4ZwCOnYjVmJPaW

Score
5/10

Malware Config

Signatures

  • Suspicious use of SetThreadContext 1 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Suspicious use of SetWindowsHookEx 5 IoCs
  • Suspicious use of WriteProcessMemory 11 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3b3d63b72f47e9aff0947776d7d0492ea064067ceb59c447aeed41c1568947f0.exe
    "C:\Users\Admin\AppData\Local\Temp\3b3d63b72f47e9aff0947776d7d0492ea064067ceb59c447aeed41c1568947f0.exe"
    1⤵
    • Suspicious use of SetThreadContext
    • Suspicious use of WriteProcessMemory
    PID:268
    • C:\Users\Admin\AppData\Local\Temp\3b3d63b72f47e9aff0947776d7d0492ea064067ceb59c447aeed41c1568947f0.exe
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:752

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/752-54-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/752-55-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/752-59-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/752-57-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/752-61-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/752-63-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/752-66-0x000000000044E057-mapping.dmp

  • memory/752-65-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/752-68-0x00000000757E1000-0x00000000757E3000-memory.dmp

    Filesize

    8KB

  • memory/752-69-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/752-70-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/752-71-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/752-72-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB