Analysis
-
max time kernel
68s -
max time network
51s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
31-05-2023 04:51
Behavioral task
behavioral1
Sample
fe207dcf0077114dd81acdf5da97f389cc1eaaa36bdff2dde02035d8994bd527.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
fe207dcf0077114dd81acdf5da97f389cc1eaaa36bdff2dde02035d8994bd527.exe
Resource
win10v2004-20230220-en
General
-
Target
fe207dcf0077114dd81acdf5da97f389cc1eaaa36bdff2dde02035d8994bd527.exe
-
Size
4.2MB
-
MD5
377fbddda86714a8367b535544f003ec
-
SHA1
28567a96df9b0e84947b03f3889225d7e287919d
-
SHA256
fe207dcf0077114dd81acdf5da97f389cc1eaaa36bdff2dde02035d8994bd527
-
SHA512
ebd4a3afaf207a7c4c1e9e62539319564298f67e85f1eba53b1eb5d55bc6cea88f5da9de04f20c93b67251d0229b810e527688d6b805dd3003830e904e4cd4a3
-
SSDEEP
98304:brEaB7+7NB8dh8MPXAKkc8UrxuYYjZBsgh/D5PAtOW7:brESaJsh5PQUFu5BHXPA8Y
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes:
fe207dcf0077114dd81acdf5da97f389cc1eaaa36bdff2dde02035d8994bd527.exepid process 1704 fe207dcf0077114dd81acdf5da97f389cc1eaaa36bdff2dde02035d8994bd527.exe 1704 fe207dcf0077114dd81acdf5da97f389cc1eaaa36bdff2dde02035d8994bd527.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
fe207dcf0077114dd81acdf5da97f389cc1eaaa36bdff2dde02035d8994bd527.exepid process 1704 fe207dcf0077114dd81acdf5da97f389cc1eaaa36bdff2dde02035d8994bd527.exe 1704 fe207dcf0077114dd81acdf5da97f389cc1eaaa36bdff2dde02035d8994bd527.exe 1704 fe207dcf0077114dd81acdf5da97f389cc1eaaa36bdff2dde02035d8994bd527.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\fe207dcf0077114dd81acdf5da97f389cc1eaaa36bdff2dde02035d8994bd527.exe"C:\Users\Admin\AppData\Local\Temp\fe207dcf0077114dd81acdf5da97f389cc1eaaa36bdff2dde02035d8994bd527.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix ATT&CK v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1704-54-0x0000000000400000-0x0000000001592000-memory.dmpFilesize
17.6MB
-
memory/1704-55-0x0000000000400000-0x0000000001592000-memory.dmpFilesize
17.6MB
-
memory/1704-56-0x0000000000400000-0x0000000001592000-memory.dmpFilesize
17.6MB
-
memory/1704-57-0x0000000000400000-0x0000000001592000-memory.dmpFilesize
17.6MB
-
memory/1704-58-0x0000000000400000-0x0000000001592000-memory.dmpFilesize
17.6MB
-
memory/1704-59-0x0000000000220000-0x0000000000221000-memory.dmpFilesize
4KB
-
memory/1704-64-0x0000000000400000-0x0000000001592000-memory.dmpFilesize
17.6MB
-
memory/1704-65-0x0000000000220000-0x0000000000221000-memory.dmpFilesize
4KB
-
memory/1704-71-0x0000000000400000-0x0000000001592000-memory.dmpFilesize
17.6MB
-
memory/1704-72-0x0000000000400000-0x0000000001592000-memory.dmpFilesize
17.6MB