Analysis
-
max time kernel
142s -
max time network
163s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
27-11-2022 02:00
Static task
static1
Behavioral task
behavioral1
Sample
c11d4035a782df13f18c609da6172b732144559c92c4dcb9e3e6e3c953d62b6e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c11d4035a782df13f18c609da6172b732144559c92c4dcb9e3e6e3c953d62b6e.exe
Resource
win10v2004-20220812-en
General
-
Target
c11d4035a782df13f18c609da6172b732144559c92c4dcb9e3e6e3c953d62b6e.exe
-
Size
4.3MB
-
MD5
e4fb24fb0ea28b43afc2e5b75e9a2f7e
-
SHA1
40b0fc59200e6932e77683063928aa325c6a8a4a
-
SHA256
c11d4035a782df13f18c609da6172b732144559c92c4dcb9e3e6e3c953d62b6e
-
SHA512
93acc67b194d6cb5a06c76d9447437e5c78cac898c53aba5f88b0489ef2665e1b123577baa633aaa74a55caaec7d3bad9bff8f40cab35ec08c62586a7d5cfa28
-
SSDEEP
98304:JiNP0Go1i9NAaOVinE+QXvSmEQvmozmy7ry5sEC5u1xzqLKzh:WPto1P+QfJmoG5CYD2LKzh
Malware Config
Signatures
-
Loads dropped DLL 2 IoCs
pid Process 2972 c11d4035a782df13f18c609da6172b732144559c92c4dcb9e3e6e3c953d62b6e.exe 2972 c11d4035a782df13f18c609da6172b732144559c92c4dcb9e3e6e3c953d62b6e.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2972 c11d4035a782df13f18c609da6172b732144559c92c4dcb9e3e6e3c953d62b6e.exe 2972 c11d4035a782df13f18c609da6172b732144559c92c4dcb9e3e6e3c953d62b6e.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2972 c11d4035a782df13f18c609da6172b732144559c92c4dcb9e3e6e3c953d62b6e.exe 2972 c11d4035a782df13f18c609da6172b732144559c92c4dcb9e3e6e3c953d62b6e.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\c11d4035a782df13f18c609da6172b732144559c92c4dcb9e3e6e3c953d62b6e.exe"C:\Users\Admin\AppData\Local\Temp\c11d4035a782df13f18c609da6172b732144559c92c4dcb9e3e6e3c953d62b6e.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:2972
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
172KB
MD53d293cfb1308bf53aabf1d4bc2aa0833
SHA1d37fd7a138c788e55d3ca4bebbdf15bd624b0d6c
SHA256e0614182011dd8c652a60817cb8427277b19e7b1348778ac84e8e41e62e646a1
SHA5126905a1fc173bd094a698c4441ffac07e56c692e34ce127bac1dab8b88ee262ccf196e64988541309ae490d318191d0b3c22e1ee9c2e199a72c2882599256e31f
-
Filesize
172KB
MD53d293cfb1308bf53aabf1d4bc2aa0833
SHA1d37fd7a138c788e55d3ca4bebbdf15bd624b0d6c
SHA256e0614182011dd8c652a60817cb8427277b19e7b1348778ac84e8e41e62e646a1
SHA5126905a1fc173bd094a698c4441ffac07e56c692e34ce127bac1dab8b88ee262ccf196e64988541309ae490d318191d0b3c22e1ee9c2e199a72c2882599256e31f