Overview

overview

8

Static

static

5988ca6923...c3.exe

windows7-x64

1

5988ca6923...c3.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    39s
  • max time network
    47s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    23-11-2022 17:08

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    5988ca6923d4668970411878931bc3dd09fadbdcb267533108bcc3869b33e5c3.exe

  • Size

    136KB

  • MD5

    6314acf481191f819a0ebd01d305a1f7

  • SHA1

    42c54a11eec742d8775a4e31c230a2e0842f23cc

  • SHA256

    5988ca6923d4668970411878931bc3dd09fadbdcb267533108bcc3869b33e5c3

  • SHA512

    beb509d721f0f987d236f9bb87fb95ae9470c93a6ce6efd9ec03213b6d9267eacafec8d364701c1391f37868222a1bda59c880217ac455bfeb1aa602f7fc634d

  • SSDEEP

    3072:mVSMX2hidyId0xJGZDtZiab4NlKy/0g5Ktcu:mlXGidyIKfGZDtZR4NlD5Ktcu

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5988ca6923d4668970411878931bc3dd09fadbdcb267533108bcc3869b33e5c3.exe
    "C:\Users\Admin\AppData\Local\Temp\5988ca6923d4668970411878931bc3dd09fadbdcb267533108bcc3869b33e5c3.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:560

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/560-54-0x0000000076041000-0x0000000076043000-memory.dmp

    Filesize

    8KB

    Download

  • memory/560-55-0x0000000000280000-0x0000000000284000-memory.dmp

    Filesize

    16KB

    Download