Analysis

  • max time kernel
    140s
  • max time network
    29s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    20/05/2023, 12:58

General

  • Target

    7b5755e302fdb3654cec56fe9430f38247139ed5e32ba54d2c55a3757781f2b7.exe

  • Size

    273KB

  • MD5

    0a82cbdaca034cb0b952728545df62e6

  • SHA1

    293252ab054f2fe74d823a244f884b19dd3d431c

  • SHA256

    7b5755e302fdb3654cec56fe9430f38247139ed5e32ba54d2c55a3757781f2b7

  • SHA512

    60142eac71572eac3bcfd995816242db7c59d31ef3a702ed8e6be7132d01aaefe4141dae7b988e530b7b562d932858fd854c6fb41b111e65632337636c6200c3

  • SSDEEP

    6144:kpL6y7C4ifFkIK6cn3EvfKHhLGL9enPoJ1cs4a:8p7PW+6zouUN/

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7b5755e302fdb3654cec56fe9430f38247139ed5e32ba54d2c55a3757781f2b7.exe
    "C:\Users\Admin\AppData\Local\Temp\7b5755e302fdb3654cec56fe9430f38247139ed5e32ba54d2c55a3757781f2b7.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1580
  • C:\Windows\system32\AUDIODG.EXE
    C:\Windows\system32\AUDIODG.EXE 0x518
    1⤵
      PID:904

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/1580-54-0x0000000000400000-0x00000000004E3000-memory.dmp

            Filesize

            908KB

          • memory/1580-55-0x0000000000400000-0x00000000004E3000-memory.dmp

            Filesize

            908KB

          • memory/1580-58-0x0000000000400000-0x00000000004E3000-memory.dmp

            Filesize

            908KB

          • memory/1580-59-0x0000000000400000-0x00000000004E3000-memory.dmp

            Filesize

            908KB

          • memory/1580-60-0x0000000000400000-0x00000000004E3000-memory.dmp

            Filesize

            908KB

          • memory/1580-61-0x0000000000400000-0x00000000004E3000-memory.dmp

            Filesize

            908KB

          • memory/1580-67-0x0000000000400000-0x00000000004E3000-memory.dmp

            Filesize

            908KB

          • memory/1580-68-0x0000000000400000-0x00000000004E3000-memory.dmp

            Filesize

            908KB