Analysis

  • max time kernel
    83s
  • max time network
    76s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    06/12/2022, 09:00

General

  • Target

    95eff9e0b1d61ce1da74dc4985a87d47ec55233f22984666897bcc878dcc202b.exe

  • Size

    19.5MB

  • MD5

    575c2fd5380dd8a71ba99f162d8d8a6e

  • SHA1

    0e1908afdf36717aba5cfffcc4e9b053bf743b2e

  • SHA256

    95eff9e0b1d61ce1da74dc4985a87d47ec55233f22984666897bcc878dcc202b

  • SHA512

    2de314ba956cb3f65e992a9f6994eede662b8cacfc35e1fcc6b625f5c36bb1a3d2db9c9f3270814416f1ae9be9a6ea41449d5b0a0ac60a65a6a72ff18642d26d

  • SSDEEP

    393216:a4a2UBPjqgSy/hUPRCtCOCnI2nwQXWHxpRtopyL+dhu7Ojf:Be2cODOCnI7QXmxLaXhu7w

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 3 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\95eff9e0b1d61ce1da74dc4985a87d47ec55233f22984666897bcc878dcc202b.exe
    "C:\Users\Admin\AppData\Local\Temp\95eff9e0b1d61ce1da74dc4985a87d47ec55233f22984666897bcc878dcc202b.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1660

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1660-54-0x0000000075FB1000-0x0000000075FB3000-memory.dmp

    Filesize

    8KB

  • memory/1660-55-0x0000000000400000-0x0000000000A4C000-memory.dmp

    Filesize

    6.3MB

  • memory/1660-62-0x0000000000400000-0x0000000000A4C000-memory.dmp

    Filesize

    6.3MB