Analysis

  • max time kernel
    52s
  • max time network
    81s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    05/12/2022, 17:21

General

  • Target

    e0bbf867ff11ddd3580bd7081c7393408fc09818dfa79684d61017b375aee33f.exe

  • Size

    10.8MB

  • MD5

    858801bd3cca627b2f707cadce15a2e7

  • SHA1

    f7457a45ed9bfdfc417279c194e4773585fc9d9c

  • SHA256

    e0bbf867ff11ddd3580bd7081c7393408fc09818dfa79684d61017b375aee33f

  • SHA512

    afd68de761ba6ab6d9c78faaf3bd75a2c7d1dc3a53f5a9bd50d448ef259cfdf73e8128baeb7b20b66c9cc5c49d515f24647b4974c8cd1470ac89889ad7adcac0

  • SSDEEP

    196608:u47M0bkHz28GO2JB4LaK8+Ga78G54PBnHmDIs8llJp6KS60uRVn2APCN:l7M0bU2tO2JB4OxaFNQ/6KN0UV2APe

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e0bbf867ff11ddd3580bd7081c7393408fc09818dfa79684d61017b375aee33f.exe
    "C:\Users\Admin\AppData\Local\Temp\e0bbf867ff11ddd3580bd7081c7393408fc09818dfa79684d61017b375aee33f.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1964

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1964-54-0x0000000074D81000-0x0000000074D83000-memory.dmp

          Filesize

          8KB

        • memory/1964-55-0x0000000000400000-0x000000000087D000-memory.dmp

          Filesize

          4.5MB

        • memory/1964-56-0x0000000000400000-0x000000000087D000-memory.dmp

          Filesize

          4.5MB