Analysis

  • max time kernel
    3s
  • max time network
    34s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    05/12/2022, 06:15

General

  • Target

    c072bc520e3025064ff9f71cd2a26b3e69247df6d32bf579eb6402657b1aa305.exe

  • Size

    378KB

  • MD5

    8e569090a47ed599ba079379a4df513a

  • SHA1

    b3d6e94cd8aec04210ac07e50d838d8517cea686

  • SHA256

    c072bc520e3025064ff9f71cd2a26b3e69247df6d32bf579eb6402657b1aa305

  • SHA512

    e2a4c84739c9a84ace3b7bf46a55db42a476c9cdbac095a07a8039fc0bb348570b5d8298c9698527cded1be439a31d2a35cf042897a332cf71386b5f7babec57

  • SSDEEP

    6144:VISq09lkVdFnkm9dgfkuw+CnDhV6emHQ2XIqaIRVLIc6aA8vKkLRLNYNzfNSLi:eElkz2mYkuQr6eqQ2YYt9vKkLAzf0m

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c072bc520e3025064ff9f71cd2a26b3e69247df6d32bf579eb6402657b1aa305.exe
    "C:\Users\Admin\AppData\Local\Temp\c072bc520e3025064ff9f71cd2a26b3e69247df6d32bf579eb6402657b1aa305.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:948

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/948-54-0x0000000000400000-0x00000000005CE000-memory.dmp

          Filesize

          1.8MB

        • memory/948-55-0x0000000075D01000-0x0000000075D03000-memory.dmp

          Filesize

          8KB

        • memory/948-56-0x0000000000400000-0x00000000005CE000-memory.dmp

          Filesize

          1.8MB

        • memory/948-58-0x0000000000400000-0x00000000005CE000-memory.dmp

          Filesize

          1.8MB