Analysis

  • max time kernel
    134s
  • max time network
    141s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/12/2022, 12:57

General

  • Target

    a9078370d5f689f2c6798a9b9dde5cbd896e129bf229d35dc9924637fcf6e1f0.exe

  • Size

    2.6MB

  • MD5

    0721cedaead89c33ed3cca8b74c32e84

  • SHA1

    3903a85cdd02f987c6fb801c7a2560aed45b39a7

  • SHA256

    a9078370d5f689f2c6798a9b9dde5cbd896e129bf229d35dc9924637fcf6e1f0

  • SHA512

    217031b0275e61ed8f744978ac0be70c16b11b16f2dabbc9913c0fa8438578c4fc26b304bd88de7e3413ddeb882bf2d108814a003212f7958d3b6db40a1ea2ee

  • SSDEEP

    49152:pNO4J9CVeJhYCqpv8klpYXdecDnOSoq9+VvMW5dUlga:LDLJhEvU/nOSoGEvul

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a9078370d5f689f2c6798a9b9dde5cbd896e129bf229d35dc9924637fcf6e1f0.exe
    "C:\Users\Admin\AppData\Local\Temp\a9078370d5f689f2c6798a9b9dde5cbd896e129bf229d35dc9924637fcf6e1f0.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1688

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1688-132-0x0000000000400000-0x0000000000792000-memory.dmp

    Filesize

    3.6MB

  • memory/1688-133-0x0000000000400000-0x0000000000792000-memory.dmp

    Filesize

    3.6MB

  • memory/1688-134-0x0000000000400000-0x0000000000792000-memory.dmp

    Filesize

    3.6MB

  • memory/1688-135-0x0000000000400000-0x0000000000792000-memory.dmp

    Filesize

    3.6MB

  • memory/1688-136-0x0000000000400000-0x0000000000792000-memory.dmp

    Filesize

    3.6MB

  • memory/1688-138-0x0000000000400000-0x0000000000792000-memory.dmp

    Filesize

    3.6MB

  • memory/1688-137-0x0000000000400000-0x0000000000792000-memory.dmp

    Filesize

    3.6MB

  • memory/1688-139-0x0000000000400000-0x0000000000792000-memory.dmp

    Filesize

    3.6MB

  • memory/1688-140-0x0000000000400000-0x0000000000792000-memory.dmp

    Filesize

    3.6MB

  • memory/1688-141-0x0000000000400000-0x0000000000792000-memory.dmp

    Filesize

    3.6MB