Analysis
-
max time kernel
95s -
max time network
122s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
24-02-2023 21:08
Behavioral task
behavioral1
Sample
301d55f107b0681cdc61df9f1c89ec53926a80ce575e62890cbaa4338184f152.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
301d55f107b0681cdc61df9f1c89ec53926a80ce575e62890cbaa4338184f152.exe
Resource
win10v2004-20230220-en
General
-
Target
301d55f107b0681cdc61df9f1c89ec53926a80ce575e62890cbaa4338184f152.exe
-
Size
5.7MB
-
MD5
d08362ae51eb257a4181e185e7ebc61c
-
SHA1
c0e22a7aab8419072e20749ea01703619f386ff3
-
SHA256
301d55f107b0681cdc61df9f1c89ec53926a80ce575e62890cbaa4338184f152
-
SHA512
8ea13ee81a3607d39c1f388701ae7ed57d342208b449de9788a725b5e98dc23bf2b44dc1d48ac71abccf29d65c48cd1c08709cbfc01de76b04c786b0c3efd092
-
SSDEEP
98304:y4O0JbrgG82N68kgP3cJn7TBoCvy9uChd1NNEvm7Tt8qabRJbHE:RUG8r8nwn7JK9l1cu7B81RJDE
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes:
301d55f107b0681cdc61df9f1c89ec53926a80ce575e62890cbaa4338184f152.exepid process 1816 301d55f107b0681cdc61df9f1c89ec53926a80ce575e62890cbaa4338184f152.exe 1816 301d55f107b0681cdc61df9f1c89ec53926a80ce575e62890cbaa4338184f152.exe 1816 301d55f107b0681cdc61df9f1c89ec53926a80ce575e62890cbaa4338184f152.exe 1816 301d55f107b0681cdc61df9f1c89ec53926a80ce575e62890cbaa4338184f152.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Local\Temp\config.iniFilesize
20B
MD59179d9a5b1fab288a4f1f9fbdb0d2e1c
SHA1338cef72da9bc61707a95fc7fb12789cdee6d383
SHA256fa571b6600d9db9fade7fc554ed4796372c3df5756b332ed95c204adcda6871e
SHA51217112244e077ee549287fdc83f5a36a614343d144d95fe4a0f1aae40e71e34fb7bdd428927279d4e4bb4aa72d47bee7a0744c97de0234c3cfa29bfdeaeac96f7
-
memory/1816-137-0x0000000000400000-0x00000000014FE000-memory.dmpFilesize
17.0MB
-
memory/1816-142-0x0000000003260000-0x00000000033A0000-memory.dmpFilesize
1.2MB
-
memory/1816-136-0x0000000000400000-0x00000000014FE000-memory.dmpFilesize
17.0MB
-
memory/1816-133-0x0000000000400000-0x00000000014FE000-memory.dmpFilesize
17.0MB
-
memory/1816-138-0x0000000000400000-0x00000000014FE000-memory.dmpFilesize
17.0MB
-
memory/1816-139-0x0000000003260000-0x00000000033A0000-memory.dmpFilesize
1.2MB
-
memory/1816-135-0x0000000000400000-0x00000000014FE000-memory.dmpFilesize
17.0MB
-
memory/1816-141-0x0000000003260000-0x00000000033A0000-memory.dmpFilesize
1.2MB
-
memory/1816-140-0x0000000003260000-0x00000000033A0000-memory.dmpFilesize
1.2MB
-
memory/1816-143-0x0000000003260000-0x00000000033A0000-memory.dmpFilesize
1.2MB
-
memory/1816-144-0x0000000003260000-0x00000000033A0000-memory.dmpFilesize
1.2MB
-
memory/1816-134-0x0000000000400000-0x00000000014FE000-memory.dmpFilesize
17.0MB
-
memory/1816-162-0x00000000037C0000-0x00000000037C1000-memory.dmpFilesize
4KB
-
memory/1816-163-0x0000000003C30000-0x0000000003C31000-memory.dmpFilesize
4KB
-
memory/1816-164-0x0000000000400000-0x00000000014FE000-memory.dmpFilesize
17.0MB