Analysis
-
max time kernel
28s -
max time network
31s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
24-02-2023 20:47
Behavioral task
behavioral1
Sample
d66b28bda3663a9f52094d85693f321140d77f66f7aa457e2893439b159e93dc.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
d66b28bda3663a9f52094d85693f321140d77f66f7aa457e2893439b159e93dc.exe
Resource
win10v2004-20230220-en
General
-
Target
d66b28bda3663a9f52094d85693f321140d77f66f7aa457e2893439b159e93dc.exe
-
Size
2.6MB
-
MD5
6569410b807c9de7cd57cb79049aaef9
-
SHA1
de1a84940bba12ed967b48a553161974baf2e318
-
SHA256
d66b28bda3663a9f52094d85693f321140d77f66f7aa457e2893439b159e93dc
-
SHA512
9a8a0681f4fca1a08ce7a93b7ec309533cc95220d510fa5b4b6887d96db8b037163023ca7bc8ac0079848604db4a3df2d5b5bb3c283a2c52f1a429d8d54029c5
-
SSDEEP
49152:PLLQ+cdHoVyZZB+mLI6x8iDsrS7NCObA5iJ+2ris:PLLMosU6x9DcepA5cas
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
d66b28bda3663a9f52094d85693f321140d77f66f7aa457e2893439b159e93dc.exepid process 2004 d66b28bda3663a9f52094d85693f321140d77f66f7aa457e2893439b159e93dc.exe 2004 d66b28bda3663a9f52094d85693f321140d77f66f7aa457e2893439b159e93dc.exe 2004 d66b28bda3663a9f52094d85693f321140d77f66f7aa457e2893439b159e93dc.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2004-54-0x0000000000400000-0x0000000000C49000-memory.dmpFilesize
8.3MB
-
memory/2004-55-0x0000000000400000-0x0000000000C49000-memory.dmpFilesize
8.3MB
-
memory/2004-56-0x0000000000400000-0x0000000000C49000-memory.dmpFilesize
8.3MB
-
memory/2004-57-0x0000000000400000-0x0000000000C49000-memory.dmpFilesize
8.3MB
-
memory/2004-58-0x0000000000400000-0x0000000000C49000-memory.dmpFilesize
8.3MB
-
memory/2004-59-0x0000000000220000-0x0000000000221000-memory.dmpFilesize
4KB
-
memory/2004-60-0x0000000000400000-0x0000000000C49000-memory.dmpFilesize
8.3MB