Analysis

  • max time kernel
    33s
  • max time network
    41s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    04/12/2022, 07:44

General

  • Target

    b31ba5f25b5a88693a639fa0c3ced62d5922093c89c75104d6a89a8750478c33.exe

  • Size

    36KB

  • MD5

    a83a800b2f7b8def6a99700d1ba7615e

  • SHA1

    898597ab76afd5b7c3ceda9c14f09b115974aebb

  • SHA256

    b31ba5f25b5a88693a639fa0c3ced62d5922093c89c75104d6a89a8750478c33

  • SHA512

    54311132c1471ea438f95fe1f0c38f0d9bfe49b421b82d76655184bc548b97d1051477dbe3579dce4b39119cca72cb29c321c5f79d56ee60910cb8663ddbbb59

  • SSDEEP

    768:XzBP7yo4qaJUJe+ZWAz6T7oFKrYutmLYSOA:XzBP7iqzZ

Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 1 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b31ba5f25b5a88693a639fa0c3ced62d5922093c89c75104d6a89a8750478c33.exe
    "C:\Users\Admin\AppData\Local\Temp\b31ba5f25b5a88693a639fa0c3ced62d5922093c89c75104d6a89a8750478c33.exe"
    1⤵
    • Drops file in Windows directory
    • Modifies Internet Explorer settings
    • Suspicious use of SetWindowsHookEx
    PID:1752

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1752-56-0x0000000076681000-0x0000000076683000-memory.dmp

    Filesize

    8KB

  • memory/1752-57-0x0000000002830000-0x0000000003892000-memory.dmp

    Filesize

    16.4MB

  • memory/1752-58-0x00000000043A0000-0x00000000046E7000-memory.dmp

    Filesize

    3.3MB