Analysis

  • max time kernel
    42s
  • max time network
    45s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    17-02-2023 20:02

General

  • Target

    6e1441b4feb0d3221070fd8a4f3343fbf6e0590e8748d7cc12bad39c54a8893f.exe

  • Size

    2.4MB

  • MD5

    0a4ee6858195434bc4c2edcbde1de085

  • SHA1

    5367f9af61b19ba2f911101740a274b0f60a0210

  • SHA256

    6e1441b4feb0d3221070fd8a4f3343fbf6e0590e8748d7cc12bad39c54a8893f

  • SHA512

    129a408325728bbd99fc8042f6921019d65e433d542c80e22fa2d17c29671533adc2058eac59820207837596b0e531f25a9c48ab568c01d7712ca7e6cdaecc66

  • SSDEEP

    49152:Nms0NWZTxROFarfnDJgFqhzqRh/BwFXr6nCHyc/9rNt9nyt1:Nf0kZFRear7irRh/E76n4/ZNP

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6e1441b4feb0d3221070fd8a4f3343fbf6e0590e8748d7cc12bad39c54a8893f.exe
    "C:\Users\Admin\AppData\Local\Temp\6e1441b4feb0d3221070fd8a4f3343fbf6e0590e8748d7cc12bad39c54a8893f.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1412

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1412-54-0x0000000075771000-0x0000000075773000-memory.dmp

    Filesize

    8KB

  • memory/1412-55-0x0000000000400000-0x0000000000D9F000-memory.dmp

    Filesize

    9.6MB

  • memory/1412-56-0x0000000000400000-0x0000000000D9F000-memory.dmp

    Filesize

    9.6MB

  • memory/1412-57-0x0000000000400000-0x0000000000D9F000-memory.dmp

    Filesize

    9.6MB

  • memory/1412-58-0x0000000000400000-0x0000000000D9F000-memory.dmp

    Filesize

    9.6MB

  • memory/1412-59-0x0000000000400000-0x0000000000D9F000-memory.dmp

    Filesize

    9.6MB

  • memory/1412-60-0x0000000000400000-0x0000000000D9F000-memory.dmp

    Filesize

    9.6MB