Analysis

  • max time kernel
    38s
  • max time network
    47s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    28-11-2022 05:44

General

  • Target

    d114473c66431d2776572bb1245e83d6602f71e980ff1084d6827300c47f4a9e.exe

  • Size

    388KB

  • MD5

    56d9e668c269c3af0ef56c1449f4d07c

  • SHA1

    3c9d803e3f03f4390d05cc6d260986006684c725

  • SHA256

    d114473c66431d2776572bb1245e83d6602f71e980ff1084d6827300c47f4a9e

  • SHA512

    132d3f2731879f94b601ff9bd65846bf54b0e0bf72830f6decbbb5a39962e15ba5efc728456183d0fc87562e1a0ff8b0153f48c0db785f18ea0092ead0dfb9cd

  • SSDEEP

    6144:d7pyQuvDj9rOcNeaqbAnIBYz+cGsMXKmwCEHL9Oh9nCMaCQn:dNyQA3nIgp/MXKmwCjFCSq

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d114473c66431d2776572bb1245e83d6602f71e980ff1084d6827300c47f4a9e.exe
    "C:\Users\Admin\AppData\Local\Temp\d114473c66431d2776572bb1245e83d6602f71e980ff1084d6827300c47f4a9e.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1708

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1708-54-0x0000000076121000-0x0000000076123000-memory.dmp
    Filesize

    8KB

  • memory/1708-55-0x0000000000300000-0x0000000000304000-memory.dmp
    Filesize

    16KB