Analysis

  • max time kernel
    149s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24-05-2023 19:05

General

  • Target

    c17b6666836f2d3d0b20228925dff458d9f544f3027d0e15bf5eeb7524306fbc.exe

  • Size

    5.1MB

  • MD5

    2b22259f0487a1c0438cf2db832b8fdd

  • SHA1

    12b01e1b4561a3d3a114875d610ae0cd4f9a4008

  • SHA256

    c17b6666836f2d3d0b20228925dff458d9f544f3027d0e15bf5eeb7524306fbc

  • SHA512

    41189ee69398b4a866b289d912b7ea4876c64736a3671bcb48d831cdc17015ec74b7d598422d900949c56b4ddf7bd7df9a9ae8fcf83e5d9bc6be87d0a85cfa0a

  • SSDEEP

    98304:t37WwmEQlMaUdnm3QZJOcX3V9el9f6G+bf0JNMyPBbTVAGf9ZFbwu1KEmq4V3AJ5:N7WfECgE3AZygt0JG+bTVVfzFbwMpmq5

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c17b6666836f2d3d0b20228925dff458d9f544f3027d0e15bf5eeb7524306fbc.exe
    "C:\Users\Admin\AppData\Local\Temp\c17b6666836f2d3d0b20228925dff458d9f544f3027d0e15bf5eeb7524306fbc.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4116

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\config.ini
    Filesize

    20B

    MD5

    9179d9a5b1fab288a4f1f9fbdb0d2e1c

    SHA1

    338cef72da9bc61707a95fc7fb12789cdee6d383

    SHA256

    fa571b6600d9db9fade7fc554ed4796372c3df5756b332ed95c204adcda6871e

    SHA512

    17112244e077ee549287fdc83f5a36a614343d144d95fe4a0f1aae40e71e34fb7bdd428927279d4e4bb4aa72d47bee7a0744c97de0234c3cfa29bfdeaeac96f7

  • memory/4116-137-0x0000000000400000-0x00000000012B5000-memory.dmp
    Filesize

    14.7MB

  • memory/4116-141-0x00000000030C0000-0x0000000003200000-memory.dmp
    Filesize

    1.2MB

  • memory/4116-136-0x0000000000400000-0x00000000012B5000-memory.dmp
    Filesize

    14.7MB

  • memory/4116-133-0x0000000000400000-0x00000000012B5000-memory.dmp
    Filesize

    14.7MB

  • memory/4116-138-0x0000000000400000-0x00000000012B5000-memory.dmp
    Filesize

    14.7MB

  • memory/4116-139-0x00000000030C0000-0x0000000003200000-memory.dmp
    Filesize

    1.2MB

  • memory/4116-135-0x0000000000400000-0x00000000012B5000-memory.dmp
    Filesize

    14.7MB

  • memory/4116-142-0x00000000030C0000-0x0000000003200000-memory.dmp
    Filesize

    1.2MB

  • memory/4116-140-0x00000000030C0000-0x0000000003200000-memory.dmp
    Filesize

    1.2MB

  • memory/4116-143-0x00000000030C0000-0x0000000003200000-memory.dmp
    Filesize

    1.2MB

  • memory/4116-144-0x00000000030C0000-0x0000000003200000-memory.dmp
    Filesize

    1.2MB

  • memory/4116-134-0x0000000000400000-0x00000000012B5000-memory.dmp
    Filesize

    14.7MB

  • memory/4116-163-0x0000000003070000-0x0000000003071000-memory.dmp
    Filesize

    4KB

  • memory/4116-164-0x0000000000400000-0x00000000012B5000-memory.dmp
    Filesize

    14.7MB

  • memory/4116-165-0x0000000000400000-0x00000000012B5000-memory.dmp
    Filesize

    14.7MB