Analysis

  • max time kernel
    150s
  • max time network
    33s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    14/04/2023, 20:58

General

  • Target

    8cc1e38a3ebae45d3ce8903c7dcbed1b0c0dae6e0a6cf6e3f56c2de300b6e072.exe

  • Size

    3.7MB

  • MD5

    84a37057f73e077a677598ced195604d

  • SHA1

    471b68853b2813ef1e252a05c693caa4663990d6

  • SHA256

    8cc1e38a3ebae45d3ce8903c7dcbed1b0c0dae6e0a6cf6e3f56c2de300b6e072

  • SHA512

    78514e4ba48d745d441fce8993a91096c382fde41ebb3b38edf1a6af04e1f45fbc4a8dac40b27ee5c40e8f3641a0596e255abbb7b2abc06a36e4dac02804e466

  • SSDEEP

    98304:yEGln/pHg9nLSqe1nVGS0qNZz7I4Xzq0Xt:Vk/pHUnGBVGqNZz7Im

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8cc1e38a3ebae45d3ce8903c7dcbed1b0c0dae6e0a6cf6e3f56c2de300b6e072.exe
    "C:\Users\Admin\AppData\Local\Temp\8cc1e38a3ebae45d3ce8903c7dcbed1b0c0dae6e0a6cf6e3f56c2de300b6e072.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of SetWindowsHookEx
    PID:1616

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\E2EECore.2.7.2.dll

    Filesize

    8.4MB

    MD5

    8b6c94bbdbfb213e94a5dcb4fac28ce3

    SHA1

    b56102ca4f03556f387f8b30e2b404efabe0cb65

    SHA256

    982a177924762f270b36fe34c7d6847392b48ae53151dc2011078dceef487a53

    SHA512

    9d6d63b5d8cf7a978d7e91126d7a343c2f7acd00022da9d692f63e50835fdd84a59a93328564f10622f2b1f6adfd7febdd98b8ddb294d0754ed45cc9c165d25a

  • memory/1616-54-0x0000000000400000-0x0000000000921000-memory.dmp

    Filesize

    5.1MB

  • memory/1616-55-0x0000000000400000-0x0000000000921000-memory.dmp

    Filesize

    5.1MB

  • memory/1616-56-0x0000000000400000-0x0000000000921000-memory.dmp

    Filesize

    5.1MB

  • memory/1616-61-0x0000000000400000-0x0000000000921000-memory.dmp

    Filesize

    5.1MB

  • memory/1616-62-0x0000000000400000-0x0000000000921000-memory.dmp

    Filesize

    5.1MB

  • memory/1616-68-0x0000000000400000-0x0000000000921000-memory.dmp

    Filesize

    5.1MB

  • memory/1616-69-0x0000000000400000-0x0000000000921000-memory.dmp

    Filesize

    5.1MB

  • memory/1616-70-0x0000000000400000-0x0000000000921000-memory.dmp

    Filesize

    5.1MB

  • memory/1616-71-0x0000000000400000-0x0000000000921000-memory.dmp

    Filesize

    5.1MB