Analysis
-
max time kernel
248s -
max time network
300s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
01/12/2022, 13:39
Static task
static1
Behavioral task
behavioral1
Sample
ba3517dc8d3a1f75bb6b0a64805deabd254ca7656d5ce43792d8e4a706d7ae81.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ba3517dc8d3a1f75bb6b0a64805deabd254ca7656d5ce43792d8e4a706d7ae81.exe
Resource
win10v2004-20221111-en
General
-
Target
ba3517dc8d3a1f75bb6b0a64805deabd254ca7656d5ce43792d8e4a706d7ae81.exe
-
Size
210KB
-
MD5
b5747ecf23afe514a9b1e1723d653863
-
SHA1
a1fb1c133f4734a3d2c3da4ec2e095aab76c451b
-
SHA256
ba3517dc8d3a1f75bb6b0a64805deabd254ca7656d5ce43792d8e4a706d7ae81
-
SHA512
ba64bcbfcdd0b64f0bbb6d8385484dd81517a0d0f663f6e7bca87b7980c74ba4759cf4b75d2bb0c09d62fe6e4414ea38264b69816412c6dfab9f27122a35c59c
-
SSDEEP
6144:YhrSF7WWSioxgzkfguZU4blKJgdHch2K+yRfZV:WrkWWLoxgz3uSomgR47+eX
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 3512 ba3517dc8d3a1f75bb6b0a64805deabd254ca7656d5ce43792d8e4a706d7ae81.exe -
Drops file in System32 directory 1 IoCs
description ioc Process File created C:\Windows\SysWOW64\sshnas21.dll ba3517dc8d3a1f75bb6b0a64805deabd254ca7656d5ce43792d8e4a706d7ae81.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3512 ba3517dc8d3a1f75bb6b0a64805deabd254ca7656d5ce43792d8e4a706d7ae81.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\ba3517dc8d3a1f75bb6b0a64805deabd254ca7656d5ce43792d8e4a706d7ae81.exe"C:\Users\Admin\AppData\Local\Temp\ba3517dc8d3a1f75bb6b0a64805deabd254ca7656d5ce43792d8e4a706d7ae81.exe"1⤵
- Loads dropped DLL
- Drops file in System32 directory
- Suspicious use of SetWindowsHookEx
PID:3512
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
171KB
MD56ce2eece795d233b427b8d9f42306cd6
SHA1a8c94901ff7141e4c19e289dfe2747cfa322e7f7
SHA2564b639feb1c30c3feead4149bc93e815df9c4e7be513c8dc96f4a8647069f48f4
SHA5129b9ebd0688b297209cbb33e781467321887111f4246657f700577a2a51239bf7ebf16019e99c26efa03f7c807263702171e3345589c45f1e7f45691c2ab0e7da