Overview

overview

8

Static

static

c53250230d...dc.exe

windows7-x64

8

c53250230d...dc.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    351s
  • max time network
    407s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26-11-2022 20:22

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    c53250230d08eab446104dc3d0a65c5638e38a8d178d594567da9e52d4351adc.exe

  • Size

    674KB

  • MD5

    23c5e5a76589c3d0082347a3a46302b9

  • SHA1

    1de1f5179514d66dbb6c9bb447f020c1bb3f0316

  • SHA256

    c53250230d08eab446104dc3d0a65c5638e38a8d178d594567da9e52d4351adc

  • SHA512

    055c48d5c587f59987b265a77628a317fb77e7f99147f9deb54a1bd7b9459e6638d9cc182ba1bb8ec090a5851bab88a9569d5027f176e3cdf6d81b45cbdc26cf

  • SSDEEP

    12288:rkMIese06snjBQ+H7Ab/rGIkQos6qcJWe8RI6srnycVP/UM:kTnjB1HQ/rGIkQJLcJiRIl7y6P/UM

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c53250230d08eab446104dc3d0a65c5638e38a8d178d594567da9e52d4351adc.exe
    "C:\Users\Admin\AppData\Local\Temp\c53250230d08eab446104dc3d0a65c5638e38a8d178d594567da9e52d4351adc.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4816
  • C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" /automation -Embedding
    1⤵
      PID:3520

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3520-134-0x00007FFD9F410000-0x00007FFD9F420000-memory.dmp
      Filesize

      64KB

      Download
    • memory/3520-135-0x00007FFD9F410000-0x00007FFD9F420000-memory.dmp
      Filesize

      64KB

      Download
    • memory/3520-136-0x00007FFD9F410000-0x00007FFD9F420000-memory.dmp
      Filesize

      64KB

      Download
    • memory/3520-137-0x00007FFD9F410000-0x00007FFD9F420000-memory.dmp
      Filesize

      64KB

      Download
    • memory/3520-138-0x00007FFD9F410000-0x00007FFD9F420000-memory.dmp
      Filesize

      64KB

      Download
    • memory/3520-139-0x00007FFD9CAE0000-0x00007FFD9CAF0000-memory.dmp
      Filesize

      64KB

      Download