Analysis

  • max time kernel
    150s
  • max time network
    31s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    22/05/2023, 19:40

General

  • Target

    7b4bf39578b517de94739db39d2be7d85a94766ff2c2397ada21ee7dcdac582f.exe

  • Size

    5.3MB

  • MD5

    da2d8c47ff42aea8a89af580259a8acc

  • SHA1

    52d9e93b72bcbd77cb3185fd4b573fe20caf153e

  • SHA256

    7b4bf39578b517de94739db39d2be7d85a94766ff2c2397ada21ee7dcdac582f

  • SHA512

    9b26a6a97e0998edd4ef4adebb1822798c607a6d34388118aa86731b0a230d9f906e545de8ea01288252b6d8c240fc9a20541be629cfbe3a80ad925d3bfd2baf

  • SSDEEP

    98304:zDU+6lqxONesqOYNVZpis6uiplUWUWUMdGav8JsLHVyaxE5P:4qsNesOQs6t1v8JuE

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7b4bf39578b517de94739db39d2be7d85a94766ff2c2397ada21ee7dcdac582f.exe
    "C:\Users\Admin\AppData\Local\Temp\7b4bf39578b517de94739db39d2be7d85a94766ff2c2397ada21ee7dcdac582f.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of SetWindowsHookEx
    PID:1604

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • \Users\Admin\AppData\Local\Temp\6c12d6.tmp

          Filesize

          333KB

          MD5

          56a2bcecbd3cddd6f4a35361bf4920d6

          SHA1

          992e63be423f0e61093ba183f49fc0cbec790488

          SHA256

          5fcfac18758a12e0e717a5189f379922a32b5ac12f26491e638d70b54ae1dcab

          SHA512

          473cbdf760242db1f0f1d0c27046c0564998f2bf931ad03feb28af3c7bd253d00e6f0836dadf37f29e0db4171eb64e6a15ed4cb9a9d28b48fb0aab601573f551

        • memory/1604-54-0x0000000010000000-0x0000000010116000-memory.dmp

          Filesize

          1.1MB

        • memory/1604-70-0x0000000061080000-0x0000000061119000-memory.dmp

          Filesize

          612KB