Analysis
-
max time kernel
141s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
30-05-2023 02:22
Behavioral task
behavioral1
Sample
cdd2cc5f86ced443d3e5c4cd7308aefb251ffb1a390107ced534a9d47a3fee6d.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
cdd2cc5f86ced443d3e5c4cd7308aefb251ffb1a390107ced534a9d47a3fee6d.exe
Resource
win10v2004-20230220-en
General
-
Target
cdd2cc5f86ced443d3e5c4cd7308aefb251ffb1a390107ced534a9d47a3fee6d.exe
-
Size
445KB
-
MD5
a55c36fed03139d5eba18bffadf734e2
-
SHA1
47f5e2286216524055c04c6981ed3fa176b52f7b
-
SHA256
cdd2cc5f86ced443d3e5c4cd7308aefb251ffb1a390107ced534a9d47a3fee6d
-
SHA512
eb1f342bf34d7b7894b888d0d4c74fc65b9c808c1c1dd3a0a8519d952332c093bde8e2bb6a488aeafccadedadf3a4aa5bea10a9ed8a530ec2ee55c246eee7991
-
SSDEEP
12288:wAomCc/W+rA1bWbn6NtW4gOJtHKaKw+OOm0KQ1FvI:w4CirA1b+6/OOetw+cQLI
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes:
cdd2cc5f86ced443d3e5c4cd7308aefb251ffb1a390107ced534a9d47a3fee6d.exepid process 1228 cdd2cc5f86ced443d3e5c4cd7308aefb251ffb1a390107ced534a9d47a3fee6d.exe 1228 cdd2cc5f86ced443d3e5c4cd7308aefb251ffb1a390107ced534a9d47a3fee6d.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1228-134-0x0000000000400000-0x000000000057A000-memory.dmpFilesize
1.5MB
-
memory/1228-133-0x0000000000400000-0x000000000057A000-memory.dmpFilesize
1.5MB
-
memory/1228-135-0x0000000000400000-0x000000000057A000-memory.dmpFilesize
1.5MB
-
memory/1228-136-0x0000000000400000-0x000000000057A000-memory.dmpFilesize
1.5MB
-
memory/1228-137-0x0000000000400000-0x000000000057A000-memory.dmpFilesize
1.5MB
-
memory/1228-141-0x0000000000400000-0x000000000057A000-memory.dmpFilesize
1.5MB
-
memory/1228-142-0x0000000000400000-0x000000000057A000-memory.dmpFilesize
1.5MB
-
memory/1228-143-0x0000000000400000-0x000000000057A000-memory.dmpFilesize
1.5MB
-
memory/1228-148-0x0000000000400000-0x000000000057A000-memory.dmpFilesize
1.5MB
-
memory/1228-149-0x0000000000400000-0x000000000057A000-memory.dmpFilesize
1.5MB