Overview

overview

1

Static

static

c0366943a9...a8.exe

windows7-x64

1

c0366943a9...a8.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    90s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-01-2023 10:36

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c0366943a947d4d7b05994fcd8c4452b8a4b38e2cff1ef0ae7a9f49ade8f8ba8.exe

  • Size

    193KB

  • MD5

    1a34163c6fe6a9ea1acfabfeb9baf810

  • SHA1

    501a1ad27e520c2f734c139b1606364a785d37de

  • SHA256

    c0366943a947d4d7b05994fcd8c4452b8a4b38e2cff1ef0ae7a9f49ade8f8ba8

  • SHA512

    b506f0bfb6c98947928e4474aee0483a16522a807906896e3d8da47c96b20571116775cec20b80c19a2642bea14923a285e02c1c34437bca44a0f5db52464f72

  • SSDEEP

    3072:rePERBtJ1/3ao07CtOA2P+BHLutd4iCnYx:rVtJZ3907CymFutdWYx

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx ⋅ 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c0366943a947d4d7b05994fcd8c4452b8a4b38e2cff1ef0ae7a9f49ade8f8ba8.exe
    "C:\Users\Admin\AppData\Local\Temp\c0366943a947d4d7b05994fcd8c4452b8a4b38e2cff1ef0ae7a9f49ade8f8ba8.exe"
    Suspicious use of SetWindowsHookEx
    PID:536

Network

MITRE ATT&CK Matrix

Collection

    Command and Control

      Credential Access

        Defense Evasion

          Discovery

            Execution

              Exfiltration

                Impact

                  Initial Access

                    Lateral Movement

                      Persistence

                        Privilege Escalation

                          Replay Monitor

                          00:00 00:00

                          Downloads