Overview

overview

1

Static

static

afb5693b14...cf.exe

windows7-x64

1

afb5693b14...cf.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    140s
  • max time network
    148s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    04/12/2022, 08:22

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    afb5693b1467f93ced53b81418b80fed8715449ee0bded976e15aa4fc490f4cf.exe

  • Size

    636KB

  • MD5

    455d596acd42c3e23e61b9ece6e039e0

  • SHA1

    49d159c63b69b5fba24fb3a969283b0dc9f7521a

  • SHA256

    afb5693b1467f93ced53b81418b80fed8715449ee0bded976e15aa4fc490f4cf

  • SHA512

    23d4abaf37b5af7b10ea6c9a5cb917dd85f6c54311dd51fc0949c66ccfc1f75139fd2946d2add3e25e94e28073c89f95c7076b71235df9f000db4e60de8c6e87

  • SSDEEP

    12288:pKrgi/5bozNXGHx+XS97pqCi3omZId+Z7DfLi8FKTqfJpdT:pKUihbozNXqxf97pAomZh7DfLiSkgT

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\afb5693b1467f93ced53b81418b80fed8715449ee0bded976e15aa4fc490f4cf.exe
    "C:\Users\Admin\AppData\Local\Temp\afb5693b1467f93ced53b81418b80fed8715449ee0bded976e15aa4fc490f4cf.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1572

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1572-54-0x0000000076121000-0x0000000076123000-memory.dmp

    Filesize

    8KB

    Download