Analysis

  • max time kernel
    29s
  • max time network
    33s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    14/06/2023, 14:28

General

  • Target

    GWX_control_panel.exe

  • Size

    4.4MB

  • MD5

    c6ea8429c22c53bc7a738ffec4831429

  • SHA1

    ff89e1f50bdf778293e9cbbc91bf76aa5fa85143

  • SHA256

    bf0b2c1f38f2dde284c20ca0c4027495f52e52b35b846a1f655c6670816552c8

  • SHA512

    4ab5a451922c875fcb0e0f09df5a3fc8075f7727e9d1d550eecaf34b8230126816c271f0300ba1c9fa7a17d462c600d42316bb1522b1592eb89f4f8a8acf5855

  • SSDEEP

    98304:z8uWTz6+AlHKQhOkrdZ5O9pO+1t1c1X3gCKFLOAkGkzdnEVomFHKnPw:uzQ49pO+1t1c1gCKFLOyomFHKnPw

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 7 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\GWX_control_panel.exe
    "C:\Users\Admin\AppData\Local\Temp\GWX_control_panel.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1060

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1060-54-0x0000000076720000-0x00000000767BD000-memory.dmp

          Filesize

          628KB

        • memory/1060-55-0x00000000767C0000-0x0000000076860000-memory.dmp

          Filesize

          640KB

        • memory/1060-56-0x0000000074AB0000-0x0000000074B01000-memory.dmp

          Filesize

          324KB

        • memory/1060-57-0x0000000075060000-0x0000000075CAA000-memory.dmp

          Filesize

          12.3MB

        • memory/1060-58-0x00000000769C0000-0x0000000076A17000-memory.dmp

          Filesize

          348KB

        • memory/1060-59-0x0000000076860000-0x00000000769BC000-memory.dmp

          Filesize

          1.4MB

        • memory/1060-60-0x0000000076680000-0x000000007670F000-memory.dmp

          Filesize

          572KB

        • memory/1060-61-0x00000000745C0000-0x0000000074750000-memory.dmp

          Filesize

          1.6MB

        • memory/1060-62-0x00000000744D0000-0x00000000745BB000-memory.dmp

          Filesize

          940KB

        • memory/1060-63-0x0000000076A60000-0x0000000076C75000-memory.dmp

          Filesize

          2.1MB

        • memory/1060-64-0x0000000074450000-0x0000000074482000-memory.dmp

          Filesize

          200KB

        • memory/1060-65-0x00000000743D0000-0x0000000074446000-memory.dmp

          Filesize

          472KB

        • memory/1060-66-0x0000000000F50000-0x00000000013BC000-memory.dmp

          Filesize

          4.4MB

        • memory/1060-67-0x00000000767C0000-0x0000000076860000-memory.dmp

          Filesize

          640KB

        • memory/1060-68-0x0000000074AB0000-0x0000000074B01000-memory.dmp

          Filesize

          324KB

        • memory/1060-70-0x00000000769C0000-0x0000000076A17000-memory.dmp

          Filesize

          348KB

        • memory/1060-69-0x0000000075060000-0x0000000075CAA000-memory.dmp

          Filesize

          12.3MB

        • memory/1060-71-0x0000000074910000-0x0000000074AAE000-memory.dmp

          Filesize

          1.6MB

        • memory/1060-73-0x0000000076860000-0x00000000769BC000-memory.dmp

          Filesize

          1.4MB

        • memory/1060-74-0x0000000076680000-0x000000007670F000-memory.dmp

          Filesize

          572KB

        • memory/1060-75-0x00000000745C0000-0x0000000074750000-memory.dmp

          Filesize

          1.6MB

        • memory/1060-76-0x00000000744D0000-0x00000000745BB000-memory.dmp

          Filesize

          940KB

        • memory/1060-77-0x0000000074900000-0x0000000074909000-memory.dmp

          Filesize

          36KB

        • memory/1060-78-0x0000000076A60000-0x0000000076C75000-memory.dmp

          Filesize

          2.1MB

        • memory/1060-82-0x00000000743D0000-0x0000000074446000-memory.dmp

          Filesize

          472KB

        • memory/1060-83-0x0000000000F50000-0x00000000013BC000-memory.dmp

          Filesize

          4.4MB

        • memory/1060-84-0x0000000076720000-0x00000000767BD000-memory.dmp

          Filesize

          628KB

        • memory/1060-81-0x0000000074450000-0x0000000074482000-memory.dmp

          Filesize

          200KB

        • memory/1060-79-0x0000000074490000-0x00000000744CC000-memory.dmp

          Filesize

          240KB

        • memory/1060-85-0x00000000767C0000-0x0000000076860000-memory.dmp

          Filesize

          640KB

        • memory/1060-87-0x00000000769C0000-0x0000000076A17000-memory.dmp

          Filesize

          348KB

        • memory/1060-86-0x0000000074AB0000-0x0000000074B01000-memory.dmp

          Filesize

          324KB

        • memory/1060-88-0x0000000074910000-0x0000000074AAE000-memory.dmp

          Filesize

          1.6MB

        • memory/1060-90-0x0000000076680000-0x000000007670F000-memory.dmp

          Filesize

          572KB

        • memory/1060-91-0x0000000076A60000-0x0000000076C75000-memory.dmp

          Filesize

          2.1MB

        • memory/1060-92-0x0000000074490000-0x00000000744CC000-memory.dmp

          Filesize

          240KB

        • memory/1060-93-0x0000000074450000-0x0000000074482000-memory.dmp

          Filesize

          200KB

        • memory/1060-94-0x00000000767C0000-0x0000000076860000-memory.dmp

          Filesize

          640KB

        • memory/1060-95-0x0000000074AB0000-0x0000000074B01000-memory.dmp

          Filesize

          324KB

        • memory/1060-96-0x00000000769C0000-0x0000000076A17000-memory.dmp

          Filesize

          348KB

        • memory/1060-97-0x0000000074910000-0x0000000074AAE000-memory.dmp

          Filesize

          1.6MB

        • memory/1060-99-0x00000000745C0000-0x0000000074750000-memory.dmp

          Filesize

          1.6MB

        • memory/1060-100-0x0000000074900000-0x0000000074909000-memory.dmp

          Filesize

          36KB

        • memory/1060-101-0x0000000076A60000-0x0000000076C75000-memory.dmp

          Filesize

          2.1MB

        • memory/1060-102-0x0000000074490000-0x00000000744CC000-memory.dmp

          Filesize

          240KB

        • memory/1060-103-0x0000000074450000-0x0000000074482000-memory.dmp

          Filesize

          200KB

        • memory/1060-104-0x0000000000F50000-0x00000000013BC000-memory.dmp

          Filesize

          4.4MB

        • memory/1060-105-0x0000000076720000-0x00000000767BD000-memory.dmp

          Filesize

          628KB

        • memory/1060-106-0x00000000767C0000-0x0000000076860000-memory.dmp

          Filesize

          640KB

        • memory/1060-107-0x0000000074AB0000-0x0000000074B01000-memory.dmp

          Filesize

          324KB

        • memory/1060-108-0x00000000769C0000-0x0000000076A17000-memory.dmp

          Filesize

          348KB

        • memory/1060-109-0x0000000074910000-0x0000000074AAE000-memory.dmp

          Filesize

          1.6MB

        • memory/1060-111-0x0000000076680000-0x000000007670F000-memory.dmp

          Filesize

          572KB

        • memory/1060-112-0x00000000745C0000-0x0000000074750000-memory.dmp

          Filesize

          1.6MB

        • memory/1060-113-0x0000000074900000-0x0000000074909000-memory.dmp

          Filesize

          36KB

        • memory/1060-114-0x0000000076A60000-0x0000000076C75000-memory.dmp

          Filesize

          2.1MB

        • memory/1060-115-0x0000000074490000-0x00000000744CC000-memory.dmp

          Filesize

          240KB

        • memory/1060-117-0x0000000074450000-0x0000000074482000-memory.dmp

          Filesize

          200KB

        • memory/1060-118-0x00000000743D0000-0x0000000074446000-memory.dmp

          Filesize

          472KB

        • memory/1060-121-0x00000000745C0000-0x0000000074750000-memory.dmp

          Filesize

          1.6MB

        • memory/1060-120-0x00000000769C0000-0x0000000076A17000-memory.dmp

          Filesize

          348KB

        • memory/1060-119-0x0000000000F50000-0x00000000013BC000-memory.dmp

          Filesize

          4.4MB

        • memory/1060-122-0x00000000743D0000-0x0000000074446000-memory.dmp

          Filesize

          472KB

        • memory/1060-123-0x0000000000F50000-0x00000000013BC000-memory.dmp

          Filesize

          4.4MB