Analysis
-
max time kernel
39s -
max time network
50s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
-
submitted
03/12/2022, 20:49
General
-
Target
d8d22995ffde0c2ef4bc70a26cfbed41cf787ce59e2ad457ecf01e4bddf699f6.exe
-
Size
512KB
-
MD5
18ba1112d9a9e69b9168e7f3daae4356
-
SHA1
2bfcbff9be0349ba5a7741de2b80f6a2befe969d
-
SHA256
d8d22995ffde0c2ef4bc70a26cfbed41cf787ce59e2ad457ecf01e4bddf699f6
-
SHA512
d501e8c528ddf8518c04162bbcaef32c6cd488ea933d549bef17bb6f5860a3e26832ad533da1fc849479fed6e496c8e4b712f5efa67289b906d7b3859888c44d
-
SSDEEP
6144:GGLHJniDG0kySViLyCty9ogiyjv5EW+Y5uAIAxApsS437t0ys8ltWofd+HPwJEBE:XbJnoG0RyCs6giybBunHWJOzoVuPwJz
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 4 IoCs
-
Suspicious use of SetWindowsHookEx 6 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d8d22995ffde0c2ef4bc70a26cfbed41cf787ce59e2ad457ecf01e4bddf699f6.exe"C:\Users\Admin\AppData\Local\Temp\d8d22995ffde0c2ef4bc70a26cfbed41cf787ce59e2ad457ecf01e4bddf699f6.exe"1⤵
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x5401⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
370KB
MD5bae64ec48bd319ac1f9a532562acc72e
SHA1e59840a0803e44c9ac90ab6e1548b3591f6519ac
SHA2568bc855e0329525aa344c59981fd184877d59d2010a9097574619dfd365c077d4
SHA51268502dc10305c1150fa6d117cec96807fe165acfc5e8359daae7f50476b1a23efb0c1f63ec407000d0c230cb134c15a1118a81632e67cb3b38dab42fe0b431c6
-
Filesize
392KB
-
Filesize
8KB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
392KB
-
Filesize
1.5MB