Analysis
-
max time kernel
20s -
max time network
56s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
-
submitted
23-11-2022 13:31
General
-
Target
4486dce62145a18a98bd420c564490b5de7bcba143261e28bec014d8425d88e9.exe
-
Size
1.3MB
-
MD5
81d6960a788ab580092c16af1f4ca7e9
-
SHA1
552ab59e4adb1f199f9b87e80902ca62900162fd
-
SHA256
4486dce62145a18a98bd420c564490b5de7bcba143261e28bec014d8425d88e9
-
SHA512
c8463be53906224d86fe36a0ba46e999eeb4bc3f848e3e1a2b603a784ea812a2ef82a7eaedc7cfcac12db75204b1e50d0350007e15ccdc8fe674773884faa1d4
-
SSDEEP
24576:3OiZzDXGLFP53UG7bL1HohIE6BvRx0GOb/4+a0q3bhAqtxe9q:ei1DWLFP53UGe76x0ZUphdtZ
Score
5/10
Malware Config
Signatures
-
Suspicious use of SetThreadContext 1 IoCs
-
Modifies Internet Explorer settings 1 TTPs 1 IoCs
-
Suspicious use of SetWindowsHookEx 5 IoCs
-
Suspicious use of WriteProcessMemory 11 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4486dce62145a18a98bd420c564490b5de7bcba143261e28bec014d8425d88e9.exe"C:\Users\Admin\AppData\Local\Temp\4486dce62145a18a98bd420c564490b5de7bcba143261e28bec014d8425d88e9.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\4486dce62145a18a98bd420c564490b5de7bcba143261e28bec014d8425d88e9.exe2⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
864KB
-
Filesize
864KB
-
Filesize
864KB
-
Filesize
864KB
-
Filesize
864KB
-
Filesize
864KB
-
Filesize
864KB
-
-
Filesize
8KB
-
Filesize
864KB
-
Filesize
864KB
-
Filesize
864KB