Analysis
-
max time kernel
106s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
20-02-2023 19:28
Behavioral task
behavioral1
Sample
6b2cd55703bba374a82757e0165f408f9f7f74c8847e75bc6851a237bd5efeb6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6b2cd55703bba374a82757e0165f408f9f7f74c8847e75bc6851a237bd5efeb6.exe
Resource
win10v2004-20221111-en
General
-
Target
6b2cd55703bba374a82757e0165f408f9f7f74c8847e75bc6851a237bd5efeb6.exe
-
Size
5.0MB
-
MD5
a64834c27eef6ee17fe3341a1c39eb82
-
SHA1
99e16f1541fd08979db7f80cae809bfbc6bcf5e9
-
SHA256
6b2cd55703bba374a82757e0165f408f9f7f74c8847e75bc6851a237bd5efeb6
-
SHA512
02129693b55ec4a24ca6f1d92c93a1c1e32d44e847ea9c5a3e232dcc8a2969e546b9c813a3bbbbdbb10d09a8b292277c27b3fc8da7a809ecac0817b23cd2545d
-
SSDEEP
98304:zkx5KAaKNK+skQqID6rOLn+Up+aSppzpjYyflxzF/6EEfQLS++c0KMiqtt29peu1:c5lN1stuqBuVfzB6ZfsS+bMiqjieRN
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 5 IoCs
Processes:
6b2cd55703bba374a82757e0165f408f9f7f74c8847e75bc6851a237bd5efeb6.exepid process 1536 6b2cd55703bba374a82757e0165f408f9f7f74c8847e75bc6851a237bd5efeb6.exe 1536 6b2cd55703bba374a82757e0165f408f9f7f74c8847e75bc6851a237bd5efeb6.exe 1536 6b2cd55703bba374a82757e0165f408f9f7f74c8847e75bc6851a237bd5efeb6.exe 1536 6b2cd55703bba374a82757e0165f408f9f7f74c8847e75bc6851a237bd5efeb6.exe 1536 6b2cd55703bba374a82757e0165f408f9f7f74c8847e75bc6851a237bd5efeb6.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Local\Temp\config.iniFilesize
20B
MD59179d9a5b1fab288a4f1f9fbdb0d2e1c
SHA1338cef72da9bc61707a95fc7fb12789cdee6d383
SHA256fa571b6600d9db9fade7fc554ed4796372c3df5756b332ed95c204adcda6871e
SHA51217112244e077ee549287fdc83f5a36a614343d144d95fe4a0f1aae40e71e34fb7bdd428927279d4e4bb4aa72d47bee7a0744c97de0234c3cfa29bfdeaeac96f7
-
memory/1536-136-0x0000000000400000-0x0000000001237000-memory.dmpFilesize
14.2MB
-
memory/1536-141-0x0000000003000000-0x0000000003140000-memory.dmpFilesize
1.2MB
-
memory/1536-135-0x0000000000400000-0x0000000001237000-memory.dmpFilesize
14.2MB
-
memory/1536-133-0x0000000000400000-0x0000000001237000-memory.dmpFilesize
14.2MB
-
memory/1536-137-0x0000000000400000-0x0000000001237000-memory.dmpFilesize
14.2MB
-
memory/1536-138-0x0000000003000000-0x0000000003140000-memory.dmpFilesize
1.2MB
-
memory/1536-134-0x0000000000400000-0x0000000001237000-memory.dmpFilesize
14.2MB
-
memory/1536-140-0x0000000003000000-0x0000000003140000-memory.dmpFilesize
1.2MB
-
memory/1536-139-0x0000000003000000-0x0000000003140000-memory.dmpFilesize
1.2MB
-
memory/1536-142-0x0000000003000000-0x0000000003140000-memory.dmpFilesize
1.2MB
-
memory/1536-143-0x0000000003000000-0x0000000003140000-memory.dmpFilesize
1.2MB
-
memory/1536-132-0x0000000000400000-0x0000000001237000-memory.dmpFilesize
14.2MB
-
memory/1536-161-0x0000000003500000-0x0000000003501000-memory.dmpFilesize
4KB
-
memory/1536-162-0x0000000000400000-0x0000000001237000-memory.dmpFilesize
14.2MB
-
memory/1536-163-0x0000000000400000-0x0000000001237000-memory.dmpFilesize
14.2MB