Overview

overview

1

Static

static

afbafa68c3...e5.exe

windows7-x64

1

afbafa68c3...e5.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    111s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07/12/2022, 01:46

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    afbafa68c39741c51f4a91b0c438bca21f5ef51b5a99a8936bd4ac625cc954e5.exe

  • Size

    5.4MB

  • MD5

    1cfdc414639d5a8756dff1e75628d158

  • SHA1

    4ac43797dc27e17db1645565dc668e5656b7e05d

  • SHA256

    afbafa68c39741c51f4a91b0c438bca21f5ef51b5a99a8936bd4ac625cc954e5

  • SHA512

    4797776190eeb9ba01927ca174338f1b95dfffbcbb6ad5dc076337545bdea0cb161f05095544390378b109ad294a93afcf6d88a480ab7174e2f50243afd872ed

  • SSDEEP

    98304:oMQA+8GMvysmQeKisB5/OofCe7iFB3lgqHRjQq0S7aw:on8NysmQeKJhOmiFB1gqHdQq5aw

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\afbafa68c39741c51f4a91b0c438bca21f5ef51b5a99a8936bd4ac625cc954e5.exe
    "C:\Users\Admin\AppData\Local\Temp\afbafa68c39741c51f4a91b0c438bca21f5ef51b5a99a8936bd4ac625cc954e5.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1028

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1028-132-0x0000000000400000-0x0000000000972000-memory.dmp

          Filesize

          5.4MB

          Download

        • memory/1028-139-0x0000000000400000-0x0000000000972000-memory.dmp

          Filesize

          5.4MB

          Download