Analysis
-
max time kernel
150s -
max time network
86s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
09-06-2023 20:11
Behavioral task
behavioral1
Sample
a6130988bc418013a65b0b50c95ec636a99e4f0de923da27ed3cfbd357ed7417.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
a6130988bc418013a65b0b50c95ec636a99e4f0de923da27ed3cfbd357ed7417.exe
Resource
win10v2004-20230220-en
General
-
Target
a6130988bc418013a65b0b50c95ec636a99e4f0de923da27ed3cfbd357ed7417.exe
-
Size
2.6MB
-
MD5
8a1ca99506f5dcb326c94cf050cc3adb
-
SHA1
c72cdec9863f551cd20add98fbe2a2c2fe0849fd
-
SHA256
a6130988bc418013a65b0b50c95ec636a99e4f0de923da27ed3cfbd357ed7417
-
SHA512
c2fd38ba0d2b84ebe6105606014f16e2d5b77b1b12abdc745d9999727834c40e9dcd79a9297295003b1a865a7a5a6bcdad038eba43fe0bd190214985ec048f7a
-
SSDEEP
49152:mR9KqktWQPo9wgtd8DbRX59DWzo4DGwdaxoQ1O3PY2FAWAu/yhmxdMt:mGqCWoo923RW1OWvD/CmjMt
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes:
a6130988bc418013a65b0b50c95ec636a99e4f0de923da27ed3cfbd357ed7417.exepid process 2032 a6130988bc418013a65b0b50c95ec636a99e4f0de923da27ed3cfbd357ed7417.exe 2032 a6130988bc418013a65b0b50c95ec636a99e4f0de923da27ed3cfbd357ed7417.exe 2032 a6130988bc418013a65b0b50c95ec636a99e4f0de923da27ed3cfbd357ed7417.exe 2032 a6130988bc418013a65b0b50c95ec636a99e4f0de923da27ed3cfbd357ed7417.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2032-54-0x0000000000400000-0x0000000000CC6000-memory.dmpFilesize
8.8MB
-
memory/2032-55-0x0000000000400000-0x0000000000CC6000-memory.dmpFilesize
8.8MB
-
memory/2032-56-0x0000000000400000-0x0000000000CC6000-memory.dmpFilesize
8.8MB
-
memory/2032-58-0x0000000000400000-0x0000000000CC6000-memory.dmpFilesize
8.8MB
-
memory/2032-59-0x00000000001C0000-0x00000000001C1000-memory.dmpFilesize
4KB
-
memory/2032-60-0x0000000000400000-0x0000000000CC6000-memory.dmpFilesize
8.8MB
-
memory/2032-65-0x0000000000400000-0x0000000000CC6000-memory.dmpFilesize
8.8MB
-
memory/2032-68-0x0000000003CA0000-0x0000000003CA1000-memory.dmpFilesize
4KB
-
memory/2032-67-0x0000000003AA0000-0x0000000003AA1000-memory.dmpFilesize
4KB
-
memory/2032-69-0x0000000000400000-0x0000000000CC6000-memory.dmpFilesize
8.8MB
-
memory/2032-70-0x0000000000400000-0x0000000000CC6000-memory.dmpFilesize
8.8MB