7c40eb21fc6e2b3467e8c4c280414a4460d0c32a2a19d6346afdeaba54f02e31

Analysis

max time kernel
91s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
25-11-2022 19:35

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7c40eb21fc6e2b3467e8c4c280414a4460d0c32a2a19d6346afdeaba54f02e31.exe
Size

1.0MB
MD5

093ff2deb4cfd65d429746399c2f11d9
SHA1

01f64ac88f29d21351c8085fc72b55beb1360d13
SHA256

7c40eb21fc6e2b3467e8c4c280414a4460d0c32a2a19d6346afdeaba54f02e31
SHA512

dcf4d8e3666cf1778753c22ad710261a38bb4e9335a839f37b5c497e9a370163738b0f5c280464205c53cf0358b7f507568e4bf00255317a258d025833b0933f
SSDEEP

24576:KhY1lWrALRYOoI+B+UjCAGza9H8TxZD6zABx8nMpvxE4oCwX:KhndB+U2la9ctZD6zA7EHT

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 5 IoCs

Processes:

7c40eb21fc6e2b3467e8c4c280414a4460d0c32a2a19d6346afdeaba54f02e31.exe

pid	process
3376	7c40eb21fc6e2b3467e8c4c280414a4460d0c32a2a19d6346afdeaba54f02e31.exe
3376	7c40eb21fc6e2b3467e8c4c280414a4460d0c32a2a19d6346afdeaba54f02e31.exe
3376	7c40eb21fc6e2b3467e8c4c280414a4460d0c32a2a19d6346afdeaba54f02e31.exe
3376	7c40eb21fc6e2b3467e8c4c280414a4460d0c32a2a19d6346afdeaba54f02e31.exe
3376	7c40eb21fc6e2b3467e8c4c280414a4460d0c32a2a19d6346afdeaba54f02e31.exe

Suspicious use of SetWindowsHookEx 19 IoCs

Processes:

7c40eb21fc6e2b3467e8c4c280414a4460d0c32a2a19d6346afdeaba54f02e31.exe

pid	process
3376	7c40eb21fc6e2b3467e8c4c280414a4460d0c32a2a19d6346afdeaba54f02e31.exe
3376	7c40eb21fc6e2b3467e8c4c280414a4460d0c32a2a19d6346afdeaba54f02e31.exe
3376	7c40eb21fc6e2b3467e8c4c280414a4460d0c32a2a19d6346afdeaba54f02e31.exe
3376	7c40eb21fc6e2b3467e8c4c280414a4460d0c32a2a19d6346afdeaba54f02e31.exe
3376	7c40eb21fc6e2b3467e8c4c280414a4460d0c32a2a19d6346afdeaba54f02e31.exe
3376	7c40eb21fc6e2b3467e8c4c280414a4460d0c32a2a19d6346afdeaba54f02e31.exe
3376	7c40eb21fc6e2b3467e8c4c280414a4460d0c32a2a19d6346afdeaba54f02e31.exe
3376	7c40eb21fc6e2b3467e8c4c280414a4460d0c32a2a19d6346afdeaba54f02e31.exe
3376	7c40eb21fc6e2b3467e8c4c280414a4460d0c32a2a19d6346afdeaba54f02e31.exe
3376	7c40eb21fc6e2b3467e8c4c280414a4460d0c32a2a19d6346afdeaba54f02e31.exe
3376	7c40eb21fc6e2b3467e8c4c280414a4460d0c32a2a19d6346afdeaba54f02e31.exe
3376	7c40eb21fc6e2b3467e8c4c280414a4460d0c32a2a19d6346afdeaba54f02e31.exe
3376	7c40eb21fc6e2b3467e8c4c280414a4460d0c32a2a19d6346afdeaba54f02e31.exe
3376	7c40eb21fc6e2b3467e8c4c280414a4460d0c32a2a19d6346afdeaba54f02e31.exe
3376	7c40eb21fc6e2b3467e8c4c280414a4460d0c32a2a19d6346afdeaba54f02e31.exe
3376	7c40eb21fc6e2b3467e8c4c280414a4460d0c32a2a19d6346afdeaba54f02e31.exe
3376	7c40eb21fc6e2b3467e8c4c280414a4460d0c32a2a19d6346afdeaba54f02e31.exe
3376	7c40eb21fc6e2b3467e8c4c280414a4460d0c32a2a19d6346afdeaba54f02e31.exe
3376	7c40eb21fc6e2b3467e8c4c280414a4460d0c32a2a19d6346afdeaba54f02e31.exe

C:\Users\Admin\AppData\Local\Temp\7c40eb21fc6e2b3467e8c4c280414a4460d0c32a2a19d6346afdeaba54f02e31.exe
"C:\Users\Admin\AppData\Local\Temp\7c40eb21fc6e2b3467e8c4c280414a4460d0c32a2a19d6346afdeaba54f02e31.exe"
1⤵
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
PID:3376

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\E_N4\HtmlView.fne
Filesize
212KB

MD5
4c9e8f81bf741a61915d0d4fc49d595e

SHA1
d033008b3a0e5d3fc8876e0423ee5509ecb3897c

SHA256
951d725f4a12cd4ff713ca147fa3be08a02367db6731283c3f1ba30445990129

SHA512
cf2c6f8f471c8a5aad563bc257035515860689b73ce343599c7713de8bc8338a031a722f366e005bc1907d6fc97b68b8b415e8ff05b7324fb1040c5dc02315d7

Download Submit
C:\Users\Admin\AppData\Local\Temp\E_N4\HtmlView.fne
Filesize
212KB

MD5
4c9e8f81bf741a61915d0d4fc49d595e

SHA1
d033008b3a0e5d3fc8876e0423ee5509ecb3897c

SHA256
951d725f4a12cd4ff713ca147fa3be08a02367db6731283c3f1ba30445990129

SHA512
cf2c6f8f471c8a5aad563bc257035515860689b73ce343599c7713de8bc8338a031a722f366e005bc1907d6fc97b68b8b415e8ff05b7324fb1040c5dc02315d7

Download Submit
C:\Users\Admin\AppData\Local\Temp\E_N4\iext.fnr
Filesize
216KB

MD5
cba933625bfa502fc4a1d9f34e1e4473

SHA1
5319194388c0e53321f99f1541b97af191999a09

SHA256
25549c7781b3f1b92e73b0ea721d177207cce914a66f3229a71291f2eb160013

SHA512
f5fb4b97c4f68a20e0847e6528740ce659c4501726f3b2dff1ac83e88a3b7198099da03edb0f069cd4af7ed568a2373597b235cd239895addfa5226d3a444142

Download Submit
C:\Users\Admin\AppData\Local\Temp\E_N4\iext.fnr
Filesize
216KB

MD5
cba933625bfa502fc4a1d9f34e1e4473

SHA1
5319194388c0e53321f99f1541b97af191999a09

SHA256
25549c7781b3f1b92e73b0ea721d177207cce914a66f3229a71291f2eb160013

SHA512
f5fb4b97c4f68a20e0847e6528740ce659c4501726f3b2dff1ac83e88a3b7198099da03edb0f069cd4af7ed568a2373597b235cd239895addfa5226d3a444142

Download Submit
C:\Users\Admin\AppData\Local\Temp\E_N4\krnln.fnr
Filesize
1.1MB

MD5
638e737b2293cf7b1f14c0b4fb1f3289

SHA1
f8e2223348433b992a8c42c4a7a9fb4b5c1158bc

SHA256
baad4798c3ab24dec8f0ac3cde48e2fee2e2dffa60d2b2497cd295cd6319fd5b

SHA512
4d714a0980238c49af10376ff26ec9e6415e7057925b32ec1c24780c3671047ac5b5670e46c1c6cf9f160519be8f37e1e57f05c30c6c4bda3b275b143aa0bf12

Download Submit
memory/3376-133-0x0000000000400000-0x0000000000454000-memory.dmp

Filesize
336KB

Download
memory/3376-136-0x0000000002370000-0x00000000023A8000-memory.dmp

Filesize
224KB

Download
memory/3376-140-0x00000000026B0000-0x00000000026F4000-memory.dmp

Filesize
272KB

Download
memory/3376-142-0x0000000000400000-0x0000000000454000-memory.dmp

Filesize
336KB

Download