Analysis

  • max time kernel
    39s
  • max time network
    55s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    23-11-2022 13:38

General

  • Target

    3fe6809437ddcf181d6340f19b54dee46ae3505cb964b6443131876ba3d1dac7.exe

  • Size

    1.3MB

  • MD5

    c4969a41e5725fad616dc0677c54d67e

  • SHA1

    c6334dc3407853fe8a87f98fcdcaf3f33d12851a

  • SHA256

    3fe6809437ddcf181d6340f19b54dee46ae3505cb964b6443131876ba3d1dac7

  • SHA512

    fd9acd8f4865dc2c1d34e62bcab1d7c6e9a2fcacac58a15f14f9f71f513031669d64067f093b600c8a7f89f7427a6be0cca6239b4861319a7051f6bc26a5c161

  • SSDEEP

    24576:7rKqlGCPcJKwybUDwEZZODYmR9G+gnbkk6XRJfe3DqYO/KpLwFfngWX4VmJPak:7rKo4ZwCOnYjVmJPa

Score
5/10

Malware Config

Signatures

  • Suspicious use of SetThreadContext 1 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Suspicious use of SetWindowsHookEx 5 IoCs
  • Suspicious use of WriteProcessMemory 11 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3fe6809437ddcf181d6340f19b54dee46ae3505cb964b6443131876ba3d1dac7.exe
    "C:\Users\Admin\AppData\Local\Temp\3fe6809437ddcf181d6340f19b54dee46ae3505cb964b6443131876ba3d1dac7.exe"
    1⤵
    • Suspicious use of SetThreadContext
    • Suspicious use of WriteProcessMemory
    PID:1760
    • C:\Users\Admin\AppData\Local\Temp\3fe6809437ddcf181d6340f19b54dee46ae3505cb964b6443131876ba3d1dac7.exe
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1920

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1920-54-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/1920-55-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/1920-57-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/1920-59-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/1920-61-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/1920-65-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/1920-63-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/1920-66-0x000000000044E057-mapping.dmp

  • memory/1920-68-0x0000000076181000-0x0000000076183000-memory.dmp

    Filesize

    8KB

  • memory/1920-69-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/1920-70-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB

  • memory/1920-71-0x0000000000400000-0x00000000004D9000-memory.dmp

    Filesize

    868KB