Analysis

  • max time kernel
    150s
  • max time network
    49s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    30-05-2023 07:07

General

  • Target

    2f281e5aa27a9b49d815af50c0bfb1bc81eaf0543f56570af25b0e71c1083541.exe

  • Size

    1.4MB

  • MD5

    619a136fbaacf709980bc72986b8ab97

  • SHA1

    92f2b62816d409e6536fdb7790c503eb26dd7ad5

  • SHA256

    2f281e5aa27a9b49d815af50c0bfb1bc81eaf0543f56570af25b0e71c1083541

  • SHA512

    89e383bff096bd5a2d92385e81e4ab1aa7ffe5779565f5299622eb6cedd2e002c9a69720ff8cde20a25f7ed3fd50bc4f83ada7a6afcfda99bacd7f5a75ac1778

  • SSDEEP

    24576:4106qZfmpVHSFhc+t74kn7eNL/Q4c47X87kQ9DjzKC7o9SKcq9Facki:TZfYpSFhD7r6NLd/7X8oaP14Fac

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2f281e5aa27a9b49d815af50c0bfb1bc81eaf0543f56570af25b0e71c1083541.exe
    "C:\Users\Admin\AppData\Local\Temp\2f281e5aa27a9b49d815af50c0bfb1bc81eaf0543f56570af25b0e71c1083541.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2016

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\$$IUTemp\ad_ppl2_12.zip

    Filesize

    62KB

    MD5

    68bc76ee69769204738ca9512df42e16

    SHA1

    ec969f031839502fd206f825d86c6f828155bcc5

    SHA256

    e93e5038e059c77a94b80578575f0f08fe54e85ade9c0e0b2aa0d2d187c475d7

    SHA512

    7ea6697cddc1d0a5a48df58900f5cbb26075d25542d39073c7cf4addb335348b4372133c2dfc05d3d846fe5fdf9c025580c786ec4cda9fe7356b3b776235f9f6

  • C:\Users\Admin\AppData\Local\Temp\Update.ini

    Filesize

    415B

    MD5

    edf7847e535777dc47a14f3d84bf8cd0

    SHA1

    322928bbc478884c5d52a244c0306c1aafad29f4

    SHA256

    dc25e4dd0d7eeec0a873f5465ad71954c31347089b0f69ea589f32728c246945

    SHA512

    280d80fd309e43e3efa970e390f1f5dad27cbee6acb3766eecac4aeaa1ee443b49b2f8b9d8128092be1fcff4eabad919da1c75ef552a30aeed428b472921a8e5

  • memory/2016-60-0x0000000000400000-0x00000000008C2000-memory.dmp

    Filesize

    4.8MB

  • memory/2016-61-0x0000000000240000-0x0000000000241000-memory.dmp

    Filesize

    4KB

  • memory/2016-110-0x0000000000400000-0x00000000008C2000-memory.dmp

    Filesize

    4.8MB

  • memory/2016-122-0x0000000000240000-0x0000000000241000-memory.dmp

    Filesize

    4KB

  • memory/2016-127-0x0000000000400000-0x00000000008C2000-memory.dmp

    Filesize

    4.8MB

  • memory/2016-132-0x0000000000400000-0x00000000008C2000-memory.dmp

    Filesize

    4.8MB

  • memory/2016-148-0x0000000000400000-0x00000000008C2000-memory.dmp

    Filesize

    4.8MB

  • memory/2016-229-0x0000000000400000-0x00000000008C2000-memory.dmp

    Filesize

    4.8MB

  • memory/2016-232-0x0000000000400000-0x00000000008C2000-memory.dmp

    Filesize

    4.8MB

  • memory/2016-234-0x0000000000400000-0x00000000008C2000-memory.dmp

    Filesize

    4.8MB