Analysis

  • max time kernel
    141s
  • max time network
    33s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    21-02-2023 19:37

General

  • Target

    f4dee49581ec6375306a28bf28b8c1225a362c9e63be0f795e54ce85b41449e8.exe

  • Size

    4.6MB

  • MD5

    2b1c80545cf54f06c15abf1191f8c16b

  • SHA1

    66b1562d02b3f3c35cb421099b882565d81f5b51

  • SHA256

    f4dee49581ec6375306a28bf28b8c1225a362c9e63be0f795e54ce85b41449e8

  • SHA512

    3a2787ab69b9cebaff3e5302318e4898a1c7c04f2505c04eb349a5e33212403a39e0ecfb97cd50017ad9f8053adbe2018c5c518dcb1c6a5546e6d7bd00c232c3

  • SSDEEP

    98304:4gkq+f4eq15qPBc5RfIR4V5kA9cYE5+HXfxTAr0lmO8:GICO5RfRvhGyPxT6d

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f4dee49581ec6375306a28bf28b8c1225a362c9e63be0f795e54ce85b41449e8.exe
    "C:\Users\Admin\AppData\Local\Temp\f4dee49581ec6375306a28bf28b8c1225a362c9e63be0f795e54ce85b41449e8.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1852

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1852-54-0x0000000000400000-0x00000000012E9000-memory.dmp
    Filesize

    14.9MB

  • memory/1852-55-0x0000000000400000-0x00000000012E9000-memory.dmp
    Filesize

    14.9MB

  • memory/1852-56-0x0000000000400000-0x00000000012E9000-memory.dmp
    Filesize

    14.9MB

  • memory/1852-57-0x0000000000400000-0x00000000012E9000-memory.dmp
    Filesize

    14.9MB

  • memory/1852-58-0x0000000000400000-0x00000000012E9000-memory.dmp
    Filesize

    14.9MB

  • memory/1852-59-0x0000000000230000-0x0000000000231000-memory.dmp
    Filesize

    4KB

  • memory/1852-60-0x0000000000400000-0x00000000012E9000-memory.dmp
    Filesize

    14.9MB

  • memory/1852-61-0x0000000000230000-0x0000000000231000-memory.dmp
    Filesize

    4KB