Analysis
-
max time kernel
19s -
max time network
52s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
09-02-2023 07:44
Behavioral task
behavioral1
Sample
9f8b3e1ec48d0c77b839574cb4732af68202b1fa11b817e2976f99d5fce22473.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9f8b3e1ec48d0c77b839574cb4732af68202b1fa11b817e2976f99d5fce22473.exe
Resource
win10v2004-20221111-en
General
-
Target
9f8b3e1ec48d0c77b839574cb4732af68202b1fa11b817e2976f99d5fce22473.exe
-
Size
2.6MB
-
MD5
f0a7272ce12194cb50bdc083a0d4a5ac
-
SHA1
e9ce5104e30f253e03103ff0381c93bb5de91033
-
SHA256
9f8b3e1ec48d0c77b839574cb4732af68202b1fa11b817e2976f99d5fce22473
-
SHA512
3d20fb82d5f62301a1aff98f953708145876f60caa452f27456193f11b45d7c8e67203864c492636e2f99288e23e3253d85ff02f3469922b610389965fef23de
-
SSDEEP
49152:G8qGo0tSthYGV4+etJ3aVDETUV9YPu5LX6u0BLES10yHBjMTT:HHU/Vo1aNE4V+P+D6u0ySvHBjM
Malware Config
Signatures
-
Modifies Control Panel 4 IoCs
Processes:
9f8b3e1ec48d0c77b839574cb4732af68202b1fa11b817e2976f99d5fce22473.exedescription ioc process Set value (str) \REGISTRY\USER\S-1-5-21-3845472200-3839195424-595303356-1000\Control Panel\International\iDate = "2" 9f8b3e1ec48d0c77b839574cb4732af68202b1fa11b817e2976f99d5fce22473.exe Set value (str) \REGISTRY\USER\S-1-5-21-3845472200-3839195424-595303356-1000\Control Panel\International\sDate = "-" 9f8b3e1ec48d0c77b839574cb4732af68202b1fa11b817e2976f99d5fce22473.exe Set value (str) \REGISTRY\USER\S-1-5-21-3845472200-3839195424-595303356-1000\Control Panel\International\sLongDate = "yyyy-MM-dd" 9f8b3e1ec48d0c77b839574cb4732af68202b1fa11b817e2976f99d5fce22473.exe Set value (str) \REGISTRY\USER\S-1-5-21-3845472200-3839195424-595303356-1000\Control Panel\International\sShortDate = "yyyy-MM-dd" 9f8b3e1ec48d0c77b839574cb4732af68202b1fa11b817e2976f99d5fce22473.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
Processes:
9f8b3e1ec48d0c77b839574cb4732af68202b1fa11b817e2976f99d5fce22473.exepid process 316 9f8b3e1ec48d0c77b839574cb4732af68202b1fa11b817e2976f99d5fce22473.exe 316 9f8b3e1ec48d0c77b839574cb4732af68202b1fa11b817e2976f99d5fce22473.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/316-54-0x0000000076121000-0x0000000076123000-memory.dmpFilesize
8KB
-
memory/316-55-0x0000000000400000-0x0000000000E33000-memory.dmpFilesize
10.2MB
-
memory/316-56-0x0000000000400000-0x0000000000E33000-memory.dmpFilesize
10.2MB
-
memory/316-57-0x0000000000400000-0x0000000000E33000-memory.dmpFilesize
10.2MB
-
memory/316-58-0x0000000000400000-0x0000000000E33000-memory.dmpFilesize
10.2MB
-
memory/316-59-0x0000000000400000-0x0000000000E33000-memory.dmpFilesize
10.2MB