Analysis

  • max time kernel
    31s
  • max time network
    34s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    03/05/2023, 11:02

General

  • Target

    888-66-0x0000000000400000-0x0000000000479000-memory.exe

  • Size

    484KB

  • MD5

    ff162176c229982d06796243d9aecf20

  • SHA1

    3503f218712aac48e4c908321f606f81f5ed5d52

  • SHA256

    8d45207dc58179676eaed917a2b0b9ddd5ec37497d0510c0b84ee53a228e63a7

  • SHA512

    f4e729e8842ddefed7349fb8ae9bca6cd8f53c5d930e966648762ab1c6697f9103b16d149336868b65cfe3b7b421715aa214518b5b2ab147cf313d65af257ebc

  • SSDEEP

    12288:s/gg3qMjdnjdla/KZXvoZMdAt6+h+hrWijYKkJj6GmZU:sZ3jsKZiMdAtz+hrbYb6nZ

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\888-66-0x0000000000400000-0x0000000000479000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\888-66-0x0000000000400000-0x0000000000479000-memory.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:624

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads