Analysis
-
max time kernel
150s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
09-06-2023 20:11
Behavioral task
behavioral1
Sample
a6130988bc418013a65b0b50c95ec636a99e4f0de923da27ed3cfbd357ed7417.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
a6130988bc418013a65b0b50c95ec636a99e4f0de923da27ed3cfbd357ed7417.exe
Resource
win10v2004-20230220-en
General
-
Target
a6130988bc418013a65b0b50c95ec636a99e4f0de923da27ed3cfbd357ed7417.exe
-
Size
2.6MB
-
MD5
8a1ca99506f5dcb326c94cf050cc3adb
-
SHA1
c72cdec9863f551cd20add98fbe2a2c2fe0849fd
-
SHA256
a6130988bc418013a65b0b50c95ec636a99e4f0de923da27ed3cfbd357ed7417
-
SHA512
c2fd38ba0d2b84ebe6105606014f16e2d5b77b1b12abdc745d9999727834c40e9dcd79a9297295003b1a865a7a5a6bcdad038eba43fe0bd190214985ec048f7a
-
SSDEEP
49152:mR9KqktWQPo9wgtd8DbRX59DWzo4DGwdaxoQ1O3PY2FAWAu/yhmxdMt:mGqCWoo923RW1OWvD/CmjMt
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes:
a6130988bc418013a65b0b50c95ec636a99e4f0de923da27ed3cfbd357ed7417.exepid process 4944 a6130988bc418013a65b0b50c95ec636a99e4f0de923da27ed3cfbd357ed7417.exe 4944 a6130988bc418013a65b0b50c95ec636a99e4f0de923da27ed3cfbd357ed7417.exe 4944 a6130988bc418013a65b0b50c95ec636a99e4f0de923da27ed3cfbd357ed7417.exe 4944 a6130988bc418013a65b0b50c95ec636a99e4f0de923da27ed3cfbd357ed7417.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/4944-133-0x0000000000400000-0x0000000000CC6000-memory.dmpFilesize
8.8MB
-
memory/4944-134-0x0000000000400000-0x0000000000CC6000-memory.dmpFilesize
8.8MB
-
memory/4944-135-0x0000000000400000-0x0000000000CC6000-memory.dmpFilesize
8.8MB
-
memory/4944-136-0x0000000000400000-0x0000000000CC6000-memory.dmpFilesize
8.8MB
-
memory/4944-137-0x0000000000400000-0x0000000000CC6000-memory.dmpFilesize
8.8MB
-
memory/4944-138-0x0000000002A70000-0x0000000002A71000-memory.dmpFilesize
4KB
-
memory/4944-139-0x0000000000400000-0x0000000000CC6000-memory.dmpFilesize
8.8MB
-
memory/4944-141-0x0000000005FD0000-0x0000000005FD1000-memory.dmpFilesize
4KB
-
memory/4944-142-0x0000000000400000-0x0000000000CC6000-memory.dmpFilesize
8.8MB
-
memory/4944-143-0x0000000003BC0000-0x0000000003BC1000-memory.dmpFilesize
4KB
-
memory/4944-144-0x0000000005FD0000-0x0000000005FD1000-memory.dmpFilesize
4KB
-
memory/4944-146-0x0000000000400000-0x0000000000CC6000-memory.dmpFilesize
8.8MB