Analysis

  • max time kernel
    165s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    03-12-2022 18:35

General

  • Target

    064679f9064c4b9feee88d8bb261cfa97b93c5ff67fe238803f051057485caa4.exe

  • Size

    1.7MB

  • MD5

    e88901f25a88238f741675bcae5c50db

  • SHA1

    160f50bedb39adc6f70686870437173fdaf5b217

  • SHA256

    064679f9064c4b9feee88d8bb261cfa97b93c5ff67fe238803f051057485caa4

  • SHA512

    81394842e45ca617ef59b52f80c91fa7c32a77edcb1eea83a8d304d3f56ddc3ffae654feb712d95b57a64b52aa67d6dc1d74d7ade431d320ee0d5d980a9e02f4

  • SSDEEP

    49152:oVnRy4JdOyOXoIwhY5fnoG9rrmfCat5sajUy:oVnRyMQX6ofHOqUP

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 12 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\064679f9064c4b9feee88d8bb261cfa97b93c5ff67fe238803f051057485caa4.exe
    "C:\Users\Admin\AppData\Local\Temp\064679f9064c4b9feee88d8bb261cfa97b93c5ff67fe238803f051057485caa4.exe"
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1096

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1096-54-0x0000000000400000-0x00000000005F4000-memory.dmp

    Filesize

    2.0MB

  • memory/1096-55-0x0000000075601000-0x0000000075603000-memory.dmp

    Filesize

    8KB

  • memory/1096-72-0x0000000000400000-0x00000000005F4000-memory.dmp

    Filesize

    2.0MB