Overview

overview

1

Static

static

c60f793bfc...e0.exe

windows7-x64

1

c60f793bfc...e0.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    46s
  • max time network
    52s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    23-11-2022 18:59

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    c60f793bfc567c6ba8a5eb0c3e7f843726b47b6155ed8c2954f39b39f98b03e0.exe

  • Size

    692KB

  • MD5

    927b80171629eca196dc30a32d8fb6d7

  • SHA1

    dd08086f6ee62bc430406d8a7269d628b0c21f09

  • SHA256

    c60f793bfc567c6ba8a5eb0c3e7f843726b47b6155ed8c2954f39b39f98b03e0

  • SHA512

    4af3e93c82d53cc3738e31fa375984a63d7221a421f7a5dbf6fc07d7c77cc83e90d6bcf3059a665193d2f3147d77fd8120e6198f59e98bb6f050e391f91101f5

  • SSDEEP

    12288:/ATIDJ0L1m4M6cejKFYOlGx6uxvKDzU3O0SYI:/ATIDJa15M6Fe1sxDKXOO0l

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 12 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c60f793bfc567c6ba8a5eb0c3e7f843726b47b6155ed8c2954f39b39f98b03e0.exe
    "C:\Users\Admin\AppData\Local\Temp\c60f793bfc567c6ba8a5eb0c3e7f843726b47b6155ed8c2954f39b39f98b03e0.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1204

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1204-54-0x0000000074DE1000-0x0000000074DE3000-memory.dmp
    Filesize

    8KB

    Download
  • memory/1204-55-0x0000000000400000-0x00000000004C0000-memory.dmp
    Filesize

    768KB

    Download
  • memory/1204-56-0x0000000000400000-0x00000000004C0000-memory.dmp
    Filesize

    768KB

    Download