Analysis
-
max time kernel
105s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
27/11/2022, 04:05
General
-
Target
3f8238aa0761c2442330f06b1da4328c99026f2e86ef2ccd22f3cb0c0e2939e0.exe
-
Size
164KB
-
MD5
4ae7d1853dd9396936c16aff15ef69d0
-
SHA1
263f5249dc32194d8a5d7af71b775ac51fd97eb8
-
SHA256
3f8238aa0761c2442330f06b1da4328c99026f2e86ef2ccd22f3cb0c0e2939e0
-
SHA512
cf1929485588df4d977da3377803eb8cf3e82ae5f32eec678dbddd9efbb61c93b7d4bcae0e2627d79a9b65ca848dfa32fc5d05269f801a854092b21f633607e0
-
SSDEEP
3072:W0f4rrWTWhRi/hiGV3wj96shAbqM6YHQ7msh9fW98I1:R6WTMwtwjLh2qM5w7tcx1
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3f8238aa0761c2442330f06b1da4328c99026f2e86ef2ccd22f3cb0c0e2939e0.exe"C:\Users\Admin\AppData\Local\Temp\3f8238aa0761c2442330f06b1da4328c99026f2e86ef2ccd22f3cb0c0e2939e0.exe"1⤵
- Drops file in System32 directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\mswin32.exeC:\Windows\system32\mswin32.exe2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
12KB
MD5d2d8da644b3aa6e5adac94063e0d2f6d
SHA1143ffa6da858903603411b6010e7676e54cc3ddc
SHA25632948017e3265faefef16ee784aaa552ff40ace9c4512d50cad6d230ec888db2
SHA512c73a7c2e01d57427d80745a87cb2d0977af1f195a0d842fa04fede5944060f85bc3c4954ff59a6fcbaff5dc2b1a545ee6ac20d9a8feb5b6fabe02a5d9e1a4cf9
-
Filesize
12KB
MD5d2d8da644b3aa6e5adac94063e0d2f6d
SHA1143ffa6da858903603411b6010e7676e54cc3ddc
SHA25632948017e3265faefef16ee784aaa552ff40ace9c4512d50cad6d230ec888db2
SHA512c73a7c2e01d57427d80745a87cb2d0977af1f195a0d842fa04fede5944060f85bc3c4954ff59a6fcbaff5dc2b1a545ee6ac20d9a8feb5b6fabe02a5d9e1a4cf9
-
Filesize
60KB
-
Filesize
60KB
-
Filesize
60KB
-
Filesize
60KB
-
Filesize
60KB