Overview

overview

1

Static

static

6f922938a5...99.exe

windows7-x64

1

6f922938a5...99.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    129s
  • max time network
    110s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/11/2022, 03:05

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    6f922938a5b80ecd0a3887d0e37b825f7b42d1f30d1591af1d4d5b84b58b4999.exe

  • Size

    2.5MB

  • MD5

    7da2ffbc50108b7d14a4e177ee60f8ac

  • SHA1

    8543e4f8ed1e1535e0808a757a860e5bd066e9b2

  • SHA256

    6f922938a5b80ecd0a3887d0e37b825f7b42d1f30d1591af1d4d5b84b58b4999

  • SHA512

    bff85ecb45e52a4705a27af9e988e22cbb896ae1b55d2e1f08d362f620338a44435731e32397cebc18994e9f7b7656bd6ef0c22a26d7416133d47a48192dc3b6

  • SSDEEP

    49152:wTyGvEKnkawMXrVjjFsBroo1uEbZRMAaqKHewN7cFfR5XDa+T7/8Ukiihf21gfz:wmJawM7VjjFsBrojElmxqKHxRcf5TakC

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6f922938a5b80ecd0a3887d0e37b825f7b42d1f30d1591af1d4d5b84b58b4999.exe
    "C:\Users\Admin\AppData\Local\Temp\6f922938a5b80ecd0a3887d0e37b825f7b42d1f30d1591af1d4d5b84b58b4999.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:4828

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/4828-132-0x0000000000400000-0x0000000000A9C000-memory.dmp

          Filesize

          6.6MB

          Download

        • memory/4828-133-0x0000000000400000-0x0000000000A9C000-memory.dmp

          Filesize

          6.6MB

          Download

        • memory/4828-135-0x0000000000400000-0x0000000000A9C000-memory.dmp

          Filesize

          6.6MB

          Download

        • memory/4828-136-0x0000000000400000-0x0000000000A9C000-memory.dmp

          Filesize

          6.6MB

          Download