Analysis
-
max time kernel
138s -
max time network
30s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
-
submitted
24-11-2022 11:46
General
-
Target
aef0728ea0ca59eeddde014fe8dca3fb8d52b17a7ff00e0d6818cebb0631b388.exe
-
Size
108KB
-
MD5
75861786606a809a3fd09ee7e3dd7715
-
SHA1
04a2fe43da5d31b63332f6314c0c5577c7a68191
-
SHA256
aef0728ea0ca59eeddde014fe8dca3fb8d52b17a7ff00e0d6818cebb0631b388
-
SHA512
75761eb704dd6db0da5ed6efebd2ce9778a27c32c53dbc25322c0ab4bcf4f2d8942f77c8ec0f5e99213fd379b9d9beaac6c2ead42a2818f8e575f60321da22cc
-
SSDEEP
3072:qN0LwH/hUmnWtmp5dS98Cy/xcCsQ6uYHSURZ:qNxP8I0gyCsdhZ
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Loads dropped DLL 3 IoCs
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\aef0728ea0ca59eeddde014fe8dca3fb8d52b17a7ff00e0d6818cebb0631b388.exe"C:\Users\Admin\AppData\Local\Temp\aef0728ea0ca59eeddde014fe8dca3fb8d52b17a7ff00e0d6818cebb0631b388.exe"1⤵
- Loads dropped DLL
- Drops file in System32 directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\aef0728ea0ca59eeddde014fe8dca3fb8d52b17a7ff00e0d6818cebb0631b388.~01C:\Users\Admin\AppData\Local\Temp\aef0728ea0ca59eeddde014fe8dca3fb8d52b17a7ff00e0d6818cebb0631b388.~012⤵
- Executes dropped EXE
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
75KB
MD5df2cbe2f92e64a6a8772900242c1a3b9
SHA13b5ca55a52adf2885bca7114ff60b4b0c45024ab
SHA2562f14ac1ebc2a5e41e59f142c6854fb66b3fceb87c5a7b1367b368fece06c5672
SHA512e6831a3b6ab35e990e1078b013fc4ebe6513d64cd75a30d023aa1610d65cff67497a12a9a4b8495b8cca77c51cd295b41a3e00588d45135024e5193892013e3b
-
Filesize
75KB
MD5df2cbe2f92e64a6a8772900242c1a3b9
SHA13b5ca55a52adf2885bca7114ff60b4b0c45024ab
SHA2562f14ac1ebc2a5e41e59f142c6854fb66b3fceb87c5a7b1367b368fece06c5672
SHA512e6831a3b6ab35e990e1078b013fc4ebe6513d64cd75a30d023aa1610d65cff67497a12a9a4b8495b8cca77c51cd295b41a3e00588d45135024e5193892013e3b
-
Filesize
75KB
MD5df2cbe2f92e64a6a8772900242c1a3b9
SHA13b5ca55a52adf2885bca7114ff60b4b0c45024ab
SHA2562f14ac1ebc2a5e41e59f142c6854fb66b3fceb87c5a7b1367b368fece06c5672
SHA512e6831a3b6ab35e990e1078b013fc4ebe6513d64cd75a30d023aa1610d65cff67497a12a9a4b8495b8cca77c51cd295b41a3e00588d45135024e5193892013e3b
-
Filesize
4KB
MD5f14bd85eeba2b828a655fe62931035e5
SHA1c6f962ab17705248f1c54675f3f02ee162d5a2b9
SHA25678350b4add47b0ffa7ad91912fd3937afe19671b08df79463abcbedb12e470db
SHA5129a825d7976e42259f7396e9bc174ae76a12e3464b7ea452270105a5510f97388c757c70d973fc94eefb715862e3b6c99edbd86b6ca936cd6670c7f3b7ea6fde2
-
Filesize
316KB
-
Filesize
20KB
-
Filesize
316KB
-