Analysis

  • max time kernel
    31s
  • max time network
    33s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    06-06-2023 19:30

General

  • Target

    828bce2a9f8c4a94ce18d5d0bc4d6243d5cdcdc1003977d6607f3a8408ec19ee.exe

  • Size

    3.5MB

  • MD5

    ae2822c0486e3d70751eb84d7952a0e3

  • SHA1

    03489b85146161c30f118eb5d9cc176b7d240e99

  • SHA256

    828bce2a9f8c4a94ce18d5d0bc4d6243d5cdcdc1003977d6607f3a8408ec19ee

  • SHA512

    6bcca7580a40a982c8fe4cbd9b4c1f02afbf355ef5f9122fb9f4fa1d2ce544eadc897645889bc881b05d3dad2930895156fad2594ed9d1687244ac0c4881f356

  • SSDEEP

    49152:1dqXJlzt9OxGHm0FNJZykfBlJn13GuWK+dL46YANyuU/9WfzZsYwvI6X62g6Whnv:rqDf37t1tWK+BjYbWLh0AngQ2SrWKF

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\828bce2a9f8c4a94ce18d5d0bc4d6243d5cdcdc1003977d6607f3a8408ec19ee.exe
    "C:\Users\Admin\AppData\Local\Temp\828bce2a9f8c4a94ce18d5d0bc4d6243d5cdcdc1003977d6607f3a8408ec19ee.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1212

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1212-54-0x0000000000400000-0x000000000189C000-memory.dmp
    Filesize

    20.6MB

  • memory/1212-55-0x0000000000400000-0x000000000189C000-memory.dmp
    Filesize

    20.6MB

  • memory/1212-57-0x0000000000400000-0x000000000189C000-memory.dmp
    Filesize

    20.6MB

  • memory/1212-58-0x0000000001D60000-0x00000000031FC000-memory.dmp
    Filesize

    20.6MB

  • memory/1212-59-0x0000000001D60000-0x00000000031FC000-memory.dmp
    Filesize

    20.6MB

  • memory/1212-60-0x0000000001D60000-0x00000000031FC000-memory.dmp
    Filesize

    20.6MB

  • memory/1212-62-0x0000000000400000-0x000000000189C000-memory.dmp
    Filesize

    20.6MB