Analysis

  • max time kernel
    150s
  • max time network
    33s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    13-06-2023 19:59

General

  • Target

    eda59de71c218d3126e4707a285ab19eccc0e17a18f46feb2acfd3fc2375639e.exe

  • Size

    709KB

  • MD5

    a9be811b5c4da05bbc4188cdc3046cfe

  • SHA1

    975b53ad94e26b42992072b01a17b5259c1405ef

  • SHA256

    eda59de71c218d3126e4707a285ab19eccc0e17a18f46feb2acfd3fc2375639e

  • SHA512

    829d2eb19661b39cc274f7286a0a31d756f1fde902d57ddb8dc337afba554c3dc64747c13fa33166149bed159ac8c3ff80b86dc2cd96e81abb2b81eef6e0cf70

  • SSDEEP

    12288:1Dk+EGgVPlD/yegDJdE6KeaqhJHvkPHJiVqTaB01GqQbBHOXZ+QHphuC0:G+xgVPlryeIdE6xhJcPHJiV93fbBHOYJ

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\eda59de71c218d3126e4707a285ab19eccc0e17a18f46feb2acfd3fc2375639e.exe
    "C:\Users\Admin\AppData\Local\Temp\eda59de71c218d3126e4707a285ab19eccc0e17a18f46feb2acfd3fc2375639e.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1244

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1244-54-0x0000000000400000-0x000000000060C000-memory.dmp

    Filesize

    2.0MB

  • memory/1244-55-0x0000000000400000-0x000000000060C000-memory.dmp

    Filesize

    2.0MB

  • memory/1244-56-0x0000000000400000-0x000000000060C000-memory.dmp

    Filesize

    2.0MB

  • memory/1244-57-0x0000000000400000-0x000000000060C000-memory.dmp

    Filesize

    2.0MB

  • memory/1244-58-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB

  • memory/1244-61-0x0000000000400000-0x000000000060C000-memory.dmp

    Filesize

    2.0MB

  • memory/1244-62-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB

  • memory/1244-67-0x0000000000400000-0x000000000060C000-memory.dmp

    Filesize

    2.0MB

  • memory/1244-68-0x0000000000400000-0x000000000060C000-memory.dmp

    Filesize

    2.0MB

  • memory/1244-69-0x0000000000400000-0x000000000060C000-memory.dmp

    Filesize

    2.0MB

  • memory/1244-70-0x0000000000400000-0x000000000060C000-memory.dmp

    Filesize

    2.0MB

  • memory/1244-71-0x0000000000400000-0x000000000060C000-memory.dmp

    Filesize

    2.0MB