Analysis

  • max time kernel
    131s
  • max time network
    36s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    20-02-2023 20:42

General

  • Target

    1e5f1bc8e9f76dbe9a8dfb31c8e0c07ea031f376c79c59fabe7cc7c8ec850b0b.exe

  • Size

    1.3MB

  • MD5

    57d13cf4b66999ecbfab71b5354f359b

  • SHA1

    5ecb0584de46157969557bbd6458691e379f7031

  • SHA256

    1e5f1bc8e9f76dbe9a8dfb31c8e0c07ea031f376c79c59fabe7cc7c8ec850b0b

  • SHA512

    63a7846b93bbe721766a334b89299e06485369c880a4a98a7bc1e1023ec74b827ab05e3f8c2287184fb7bd3483d8639933898990d21351bed66046dd04c92ccd

  • SSDEEP

    24576:wwgr5k6EZDG1cCbMQY5nSMOBjUt48Ij4YoJ49h3/TQse:70k/Zy1/kSdBj048IsLS7Q7

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1e5f1bc8e9f76dbe9a8dfb31c8e0c07ea031f376c79c59fabe7cc7c8ec850b0b.exe
    "C:\Users\Admin\AppData\Local\Temp\1e5f1bc8e9f76dbe9a8dfb31c8e0c07ea031f376c79c59fabe7cc7c8ec850b0b.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1532

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1532-55-0x0000000000400000-0x0000000000807000-memory.dmp

    Filesize

    4.0MB

  • memory/1532-54-0x0000000000400000-0x0000000000807000-memory.dmp

    Filesize

    4.0MB

  • memory/1532-56-0x0000000000400000-0x0000000000807000-memory.dmp

    Filesize

    4.0MB

  • memory/1532-57-0x0000000000400000-0x0000000000807000-memory.dmp

    Filesize

    4.0MB

  • memory/1532-58-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB

  • memory/1532-59-0x0000000000400000-0x0000000000807000-memory.dmp

    Filesize

    4.0MB

  • memory/1532-60-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB