Analysis
-
max time kernel
146s -
max time network
180s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 18:58
Static task
static1
Behavioral task
behavioral1
Sample
579196cfaaf7b9dc0fc3881a8dbccf224017958977a36f0a02b0ca64599f2fed.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
579196cfaaf7b9dc0fc3881a8dbccf224017958977a36f0a02b0ca64599f2fed.exe
Resource
win10v2004-20220812-en
General
-
Target
579196cfaaf7b9dc0fc3881a8dbccf224017958977a36f0a02b0ca64599f2fed.exe
-
Size
60KB
-
MD5
488e750b35aa628e70d9bf9c0d1f5090
-
SHA1
b0de871ac31e650bd5acc99b22955034840115df
-
SHA256
579196cfaaf7b9dc0fc3881a8dbccf224017958977a36f0a02b0ca64599f2fed
-
SHA512
da75fb91ec1da62d4ba268409e414f4e58660b2a8624c45d4f448d41262bb10f713d87252d0864d4c79dd162479f668df685752f614713fa2da6f7962fd3dd77
-
SSDEEP
768:+k1ucUwJelZbVc5wIk7cGvBcXTUr/RO2iez0mqVs4O++:+fZwJq6Wc6iIrtSjvG
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
Processes:
579196cfaaf7b9dc0fc3881a8dbccf224017958977a36f0a02b0ca64599f2fed.exepid process 1712 579196cfaaf7b9dc0fc3881a8dbccf224017958977a36f0a02b0ca64599f2fed.exe -
Drops file in System32 directory 2 IoCs
Processes:
579196cfaaf7b9dc0fc3881a8dbccf224017958977a36f0a02b0ca64599f2fed.exedescription ioc process File created C:\Windows\SysWOW64\olemdb32.dl_ 579196cfaaf7b9dc0fc3881a8dbccf224017958977a36f0a02b0ca64599f2fed.exe File created C:\Windows\SysWOW64\olemdb32.dll 579196cfaaf7b9dc0fc3881a8dbccf224017958977a36f0a02b0ca64599f2fed.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
579196cfaaf7b9dc0fc3881a8dbccf224017958977a36f0a02b0ca64599f2fed.exepid process 1712 579196cfaaf7b9dc0fc3881a8dbccf224017958977a36f0a02b0ca64599f2fed.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\579196cfaaf7b9dc0fc3881a8dbccf224017958977a36f0a02b0ca64599f2fed.exe"C:\Users\Admin\AppData\Local\Temp\579196cfaaf7b9dc0fc3881a8dbccf224017958977a36f0a02b0ca64599f2fed.exe"1⤵
- Loads dropped DLL
- Drops file in System32 directory
- Suspicious use of SetWindowsHookEx
PID:1712
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
23KB
MD565387b1305f01ede9bce1b664207d5d7
SHA119d719d16958e6a1c5367b578cb9ff7700e695bf
SHA256148f1d2ce99fb0305e53fd24add20cd19cc420e9c1d1b64abf42b456da94cd23
SHA512cd64957c47979626be9a77b2a2ee2d0b22b72540369a4b6cfe1c1c9f8180b546db0b6e637259dd8f7a09506d738ec57fc34b116e199641c40f55e0d5b40a2a29