Overview

overview

7

Static

static

7

5a5de25f93...d4.exe

windows7-x64

1

5a5de25f93...d4.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    30s
  • max time network
    33s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    14-02-2023 19:56

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    5a5de25f9329d93885bfb7330385c2103b5324971f8e405e00ec297b955ef9d4.exe

  • Size

    3.8MB

  • MD5

    c99ffa89111fe86c0f9662dd5518f883

  • SHA1

    0f83347059c5ec1242f7cec5a68d3e11d6c9f42a

  • SHA256

    5a5de25f9329d93885bfb7330385c2103b5324971f8e405e00ec297b955ef9d4

  • SHA512

    5e0bbe995e1ef8b1dbaa174e6e85e857f9933b8a488a1f775237f72b1f10e79513b6335f835fbb98d2f25f0fcaee1e89f6bf4e90f373d8322cb4749d367ec6b3

  • SSDEEP

    98304:gnRAdly+Hg9Y6iOJyE/k6tWBEt1s0py9gH6NzNqj:J5VNOJyE/k6AE1s0oKHCQ

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5a5de25f9329d93885bfb7330385c2103b5324971f8e405e00ec297b955ef9d4.exe
    "C:\Users\Admin\AppData\Local\Temp\5a5de25f9329d93885bfb7330385c2103b5324971f8e405e00ec297b955ef9d4.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1208

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1208-54-0x0000000075591000-0x0000000075593000-memory.dmp
    Filesize

    8KB

    Download
  • memory/1208-55-0x0000000000400000-0x0000000000DBD000-memory.dmp
    Filesize

    9.7MB

    Download
  • memory/1208-56-0x0000000000400000-0x0000000000DBD000-memory.dmp
    Filesize

    9.7MB

    Download
  • memory/1208-57-0x0000000000400000-0x0000000000DBD000-memory.dmp
    Filesize

    9.7MB

    Download
  • memory/1208-58-0x0000000000400000-0x0000000000DBD000-memory.dmp
    Filesize

    9.7MB

    Download
  • memory/1208-59-0x0000000000400000-0x0000000000DBD000-memory.dmp
    Filesize

    9.7MB

    Download
  • memory/1208-61-0x0000000002820000-0x0000000002960000-memory.dmp
    Filesize

    1.2MB

    Download
  • memory/1208-60-0x0000000002820000-0x0000000002960000-memory.dmp
    Filesize

    1.2MB

    Download
  • memory/1208-62-0x0000000002820000-0x0000000002960000-memory.dmp
    Filesize

    1.2MB

    Download
  • memory/1208-64-0x0000000002820000-0x0000000002960000-memory.dmp
    Filesize

    1.2MB

    Download
  • memory/1208-63-0x0000000000400000-0x0000000000DBD000-memory.dmp
    Filesize

    9.7MB

    Download
  • memory/1208-65-0x0000000002820000-0x0000000002960000-memory.dmp
    Filesize

    1.2MB

    Download
  • memory/1208-66-0x0000000002820000-0x0000000002960000-memory.dmp
    Filesize

    1.2MB

    Download
  • memory/1208-67-0x0000000000400000-0x0000000000DBD000-memory.dmp
    Filesize

    9.7MB

    Download