Analysis

  • max time kernel
    84s
  • max time network
    87s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    09-03-2023 04:41

General

  • Target

    05a193cc3a5befc61d524b7a85bf6a4f71c5ada714219af881ee54716f78fe56.exe

  • Size

    3.1MB

  • MD5

    53585d48767f65d6dedeb9ac59731d3a

  • SHA1

    1ec8aee25ab95454d047ef8fad6595c578291267

  • SHA256

    05a193cc3a5befc61d524b7a85bf6a4f71c5ada714219af881ee54716f78fe56

  • SHA512

    5b478941c34f68225324f3bdfe019963e065d23155af16702f69f3b901989692854ae0ef9e77169d42c49737b9c927ab5dd8308b583f735de525f80b7cdd1726

  • SSDEEP

    98304:6soZi1oc1KYp/JFoRyi124gAZvf75ECy:6/ST1KYFJFoFgAFf7

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\05a193cc3a5befc61d524b7a85bf6a4f71c5ada714219af881ee54716f78fe56.exe
    "C:\Users\Admin\AppData\Local\Temp\05a193cc3a5befc61d524b7a85bf6a4f71c5ada714219af881ee54716f78fe56.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1536

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1536-54-0x0000000000400000-0x00000000007DA000-memory.dmp
    Filesize

    3.9MB

  • memory/1536-55-0x0000000000400000-0x00000000007DA000-memory.dmp
    Filesize

    3.9MB

  • memory/1536-56-0x0000000000400000-0x00000000007DA000-memory.dmp
    Filesize

    3.9MB

  • memory/1536-57-0x0000000000400000-0x00000000007DA000-memory.dmp
    Filesize

    3.9MB

  • memory/1536-58-0x0000000000400000-0x00000000007DA000-memory.dmp
    Filesize

    3.9MB

  • memory/1536-59-0x0000000000400000-0x00000000007DA000-memory.dmp
    Filesize

    3.9MB

  • memory/1536-60-0x0000000000400000-0x00000000007DA000-memory.dmp
    Filesize

    3.9MB

  • memory/1536-61-0x0000000000400000-0x00000000007DA000-memory.dmp
    Filesize

    3.9MB

  • memory/1536-62-0x0000000000400000-0x00000000007DA000-memory.dmp
    Filesize

    3.9MB

  • memory/1536-63-0x0000000000400000-0x00000000007DA000-memory.dmp
    Filesize

    3.9MB