Analysis
-
max time kernel
135s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
01/04/2023, 20:58
General
-
Target
9219a707d62a671af26b09d70274f74036e31575bc9722632b1432832667a19a.exe
-
Size
398KB
-
MD5
123d62f56a312f77645626d324c1a9c2
-
SHA1
930c6076c44c93a0bc56b4a98ae863ca76ef8a9a
-
SHA256
9219a707d62a671af26b09d70274f74036e31575bc9722632b1432832667a19a
-
SHA512
9824b52dd8cf12484d22bc6c33e4cbcaf7a2fca2ceb907b314dbb033b32f0ec4379f5c9fbe950edde39c80dd7b21503922057483fea8e174dd660ef0346740ff
-
SSDEEP
12288:K2VrhGGlW5yI/poohhfN4FTfT9cK7WZrLk4:K2bGGwyI/pJPfN4FTBp7WxI4
Score
10/10
Malware Config
Extracted
Credentials
Protocol: ftp- Host:
121.4.74.13 - Port:
21 - Username:
sukuai - Password:
sukuai
Signatures
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\9219a707d62a671af26b09d70274f74036e31575bc9722632b1432832667a19a.exe"C:\Users\Admin\AppData\Local\Temp\9219a707d62a671af26b09d70274f74036e31575bc9722632b1432832667a19a.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB