Analysis
-
max time kernel
141s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
13-06-2023 19:59
Behavioral task
behavioral1
Sample
eda59de71c218d3126e4707a285ab19eccc0e17a18f46feb2acfd3fc2375639e.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
eda59de71c218d3126e4707a285ab19eccc0e17a18f46feb2acfd3fc2375639e.exe
Resource
win10v2004-20230220-en
General
-
Target
eda59de71c218d3126e4707a285ab19eccc0e17a18f46feb2acfd3fc2375639e.exe
-
Size
709KB
-
MD5
a9be811b5c4da05bbc4188cdc3046cfe
-
SHA1
975b53ad94e26b42992072b01a17b5259c1405ef
-
SHA256
eda59de71c218d3126e4707a285ab19eccc0e17a18f46feb2acfd3fc2375639e
-
SHA512
829d2eb19661b39cc274f7286a0a31d756f1fde902d57ddb8dc337afba554c3dc64747c13fa33166149bed159ac8c3ff80b86dc2cd96e81abb2b81eef6e0cf70
-
SSDEEP
12288:1Dk+EGgVPlD/yegDJdE6KeaqhJHvkPHJiVqTaB01GqQbBHOXZ+QHphuC0:G+xgVPlryeIdE6xhJcPHJiV93fbBHOYJ
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes:
eda59de71c218d3126e4707a285ab19eccc0e17a18f46feb2acfd3fc2375639e.exepid process 1908 eda59de71c218d3126e4707a285ab19eccc0e17a18f46feb2acfd3fc2375639e.exe 1908 eda59de71c218d3126e4707a285ab19eccc0e17a18f46feb2acfd3fc2375639e.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1908-133-0x0000000000400000-0x000000000060C000-memory.dmpFilesize
2.0MB
-
memory/1908-134-0x0000000000400000-0x000000000060C000-memory.dmpFilesize
2.0MB
-
memory/1908-135-0x0000000000400000-0x000000000060C000-memory.dmpFilesize
2.0MB
-
memory/1908-137-0x00000000024A0000-0x00000000024A1000-memory.dmpFilesize
4KB
-
memory/1908-136-0x0000000000400000-0x000000000060C000-memory.dmpFilesize
2.0MB
-
memory/1908-140-0x0000000000400000-0x000000000060C000-memory.dmpFilesize
2.0MB
-
memory/1908-141-0x00000000024A0000-0x00000000024A1000-memory.dmpFilesize
4KB
-
memory/1908-144-0x0000000000400000-0x000000000060C000-memory.dmpFilesize
2.0MB
-
memory/1908-145-0x0000000000400000-0x000000000060C000-memory.dmpFilesize
2.0MB
-
memory/1908-146-0x0000000000400000-0x000000000060C000-memory.dmpFilesize
2.0MB
-
memory/1908-147-0x0000000000400000-0x000000000060C000-memory.dmpFilesize
2.0MB