Analysis

  • max time kernel
    45s
  • max time network
    49s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    20-12-2022 20:12

General

  • Target

    ef834cae42876f4dc53adae3c98d0ac24b1ba1ff9f44e0fad47380868b2ace97.exe

  • Size

    651KB

  • MD5

    7c5846b2f8e4a74ba1bbe55fbeb11cbc

  • SHA1

    252536420d1b442d7f01c1caebe406458f31c158

  • SHA256

    ef834cae42876f4dc53adae3c98d0ac24b1ba1ff9f44e0fad47380868b2ace97

  • SHA512

    e5954b4df10189967fb540bed7f7fbb68f035e4630b724dc9d914d0d1bf176a641a4cdc96399f2ff89e477c74bc9f8d72f4c4223ea5248745fe57f554f1417d5

  • SSDEEP

    12288:ohYoww4dAeljt45Hf2qrRZ3Mx60//2uwcwBfi7BuFjV+ncreNaZry+p9bnZ:ohQd5lZiHf2q33UOTbQO8+eNl2bnZ

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Suspicious use of SetWindowsHookEx 7 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ef834cae42876f4dc53adae3c98d0ac24b1ba1ff9f44e0fad47380868b2ace97.exe
    "C:\Users\Admin\AppData\Local\Temp\ef834cae42876f4dc53adae3c98d0ac24b1ba1ff9f44e0fad47380868b2ace97.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of SetWindowsHookEx
    PID:1048

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\E_N60005\krnln.fnr

    Filesize

    1.2MB

    MD5

    1eece63319e7c5f6718562129b1572f1

    SHA1

    089ea3a605639eb1292f6a2a9720f0b2801b0b6e

    SHA256

    4bed8a6e4e1548fddee40927b438132b47ef2aca6e9beb06b89fcf7714726310

    SHA512

    13537d1dd80fa87b6b908361957e8c434ca547a575c8c8aab43423063e60cb5523fb1843a467ae73db4a64d278c06b831551e78ae6d895201f7ef0c5b162c1ab

  • memory/1048-55-0x00000000759F1000-0x00000000759F3000-memory.dmp

    Filesize

    8KB

  • memory/1048-56-0x0000000000400000-0x000000000040E000-memory.dmp

    Filesize

    56KB