Analysis

  • max time kernel
    135s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14/06/2023, 14:28

General

  • Target

    GWX_control_panel.exe

  • Size

    4.4MB

  • MD5

    c6ea8429c22c53bc7a738ffec4831429

  • SHA1

    ff89e1f50bdf778293e9cbbc91bf76aa5fa85143

  • SHA256

    bf0b2c1f38f2dde284c20ca0c4027495f52e52b35b846a1f655c6670816552c8

  • SHA512

    4ab5a451922c875fcb0e0f09df5a3fc8075f7727e9d1d550eecaf34b8230126816c271f0300ba1c9fa7a17d462c600d42316bb1522b1592eb89f4f8a8acf5855

  • SSDEEP

    98304:z8uWTz6+AlHKQhOkrdZ5O9pO+1t1c1X3gCKFLOAkGkzdnEVomFHKnPw:uzQ49pO+1t1c1gCKFLOyomFHKnPw

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 7 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\GWX_control_panel.exe
    "C:\Users\Admin\AppData\Local\Temp\GWX_control_panel.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:628

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/628-133-0x0000000076460000-0x00000000764DA000-memory.dmp

          Filesize

          488KB

        • memory/628-134-0x0000000074D10000-0x0000000074D8A000-memory.dmp

          Filesize

          488KB

        • memory/628-135-0x0000000000AE0000-0x0000000000F4C000-memory.dmp

          Filesize

          4.4MB

        • memory/628-136-0x0000000076460000-0x00000000764DA000-memory.dmp

          Filesize

          488KB

        • memory/628-137-0x0000000074D10000-0x0000000074D8A000-memory.dmp

          Filesize

          488KB

        • memory/628-139-0x0000000076460000-0x00000000764DA000-memory.dmp

          Filesize

          488KB

        • memory/628-138-0x0000000000AE0000-0x0000000000F4C000-memory.dmp

          Filesize

          4.4MB

        • memory/628-140-0x0000000076460000-0x00000000764DA000-memory.dmp

          Filesize

          488KB

        • memory/628-141-0x0000000075BA0000-0x0000000075BC5000-memory.dmp

          Filesize

          148KB

        • memory/628-142-0x0000000000AE0000-0x0000000000F4C000-memory.dmp

          Filesize

          4.4MB

        • memory/628-144-0x0000000075BA0000-0x0000000075BC5000-memory.dmp

          Filesize

          148KB

        • memory/628-143-0x0000000076460000-0x00000000764DA000-memory.dmp

          Filesize

          488KB

        • memory/628-145-0x0000000074D10000-0x0000000074D8A000-memory.dmp

          Filesize

          488KB

        • memory/628-146-0x0000000000AE0000-0x0000000000F4C000-memory.dmp

          Filesize

          4.4MB

        • memory/628-147-0x0000000074D10000-0x0000000074D8A000-memory.dmp

          Filesize

          488KB

        • memory/628-148-0x0000000000AE0000-0x0000000000F4C000-memory.dmp

          Filesize

          4.4MB

        • memory/628-149-0x0000000075BA0000-0x0000000075BC5000-memory.dmp

          Filesize

          148KB

        • memory/628-150-0x0000000000AE0000-0x0000000000F4C000-memory.dmp

          Filesize

          4.4MB

        • memory/628-151-0x0000000077780000-0x00000000778A0000-memory.dmp

          Filesize

          1.1MB

        • memory/628-152-0x0000000075270000-0x00000000753F8000-memory.dmp

          Filesize

          1.5MB

        • memory/628-153-0x0000000074D10000-0x0000000074D8A000-memory.dmp

          Filesize

          488KB

        • memory/628-154-0x0000000076F10000-0x00000000774C3000-memory.dmp

          Filesize

          5.7MB

        • memory/628-155-0x0000000075A10000-0x0000000075AF3000-memory.dmp

          Filesize

          908KB

        • memory/628-156-0x0000000075600000-0x0000000075810000-memory.dmp

          Filesize

          2.1MB

        • memory/628-157-0x0000000075410000-0x0000000075579000-memory.dmp

          Filesize

          1.4MB

        • memory/628-158-0x0000000074D10000-0x0000000074D8A000-memory.dmp

          Filesize

          488KB

        • memory/628-160-0x0000000076200000-0x00000000762DC000-memory.dmp

          Filesize

          880KB

        • memory/628-159-0x0000000000AE0000-0x0000000000F4C000-memory.dmp

          Filesize

          4.4MB

        • memory/628-162-0x0000000075A10000-0x0000000075AF3000-memory.dmp

          Filesize

          908KB

        • memory/628-163-0x0000000075580000-0x00000000755F4000-memory.dmp

          Filesize

          464KB

        • memory/628-164-0x0000000075600000-0x0000000075810000-memory.dmp

          Filesize

          2.1MB

        • memory/628-165-0x0000000075410000-0x0000000075579000-memory.dmp

          Filesize

          1.4MB

        • memory/628-166-0x0000000074D10000-0x0000000074D8A000-memory.dmp

          Filesize

          488KB

        • memory/628-167-0x0000000000AE0000-0x0000000000F4C000-memory.dmp

          Filesize

          4.4MB

        • memory/628-161-0x0000000076F10000-0x00000000774C3000-memory.dmp

          Filesize

          5.7MB

        • memory/628-168-0x0000000076F10000-0x00000000774C3000-memory.dmp

          Filesize

          5.7MB

        • memory/628-170-0x0000000075600000-0x0000000075810000-memory.dmp

          Filesize

          2.1MB

        • memory/628-171-0x0000000000AE0000-0x0000000000F4C000-memory.dmp

          Filesize

          4.4MB

        • memory/628-169-0x0000000075580000-0x00000000755F4000-memory.dmp

          Filesize

          464KB

        • memory/628-172-0x0000000076F10000-0x00000000774C3000-memory.dmp

          Filesize

          5.7MB

        • memory/628-174-0x0000000075600000-0x0000000075810000-memory.dmp

          Filesize

          2.1MB

        • memory/628-175-0x0000000075BA0000-0x0000000075BC5000-memory.dmp

          Filesize

          148KB

        • memory/628-176-0x0000000000AE0000-0x0000000000F4C000-memory.dmp

          Filesize

          4.4MB

        • memory/628-177-0x0000000076F10000-0x00000000774C3000-memory.dmp

          Filesize

          5.7MB

        • memory/628-178-0x0000000075580000-0x00000000755F4000-memory.dmp

          Filesize

          464KB

        • memory/628-179-0x0000000075600000-0x0000000075810000-memory.dmp

          Filesize

          2.1MB

        • memory/628-180-0x0000000074D10000-0x0000000074D8A000-memory.dmp

          Filesize

          488KB

        • memory/628-181-0x0000000000AE0000-0x0000000000F4C000-memory.dmp

          Filesize

          4.4MB

        • memory/628-182-0x0000000076200000-0x00000000762DC000-memory.dmp

          Filesize

          880KB

        • memory/628-183-0x0000000076F10000-0x00000000774C3000-memory.dmp

          Filesize

          5.7MB

        • memory/628-185-0x0000000075580000-0x00000000755F4000-memory.dmp

          Filesize

          464KB

        • memory/628-186-0x0000000075600000-0x0000000075810000-memory.dmp

          Filesize

          2.1MB

        • memory/628-188-0x0000000074D10000-0x0000000074D8A000-memory.dmp

          Filesize

          488KB

        • memory/628-190-0x0000000000AE0000-0x0000000000F4C000-memory.dmp

          Filesize

          4.4MB

        • memory/628-191-0x0000000076F10000-0x00000000774C3000-memory.dmp

          Filesize

          5.7MB

        • memory/628-192-0x0000000075600000-0x0000000075810000-memory.dmp

          Filesize

          2.1MB

        • memory/628-194-0x0000000000AE0000-0x0000000000F4C000-memory.dmp

          Filesize

          4.4MB

        • memory/628-195-0x0000000076F10000-0x00000000774C3000-memory.dmp

          Filesize

          5.7MB

        • memory/628-196-0x0000000075600000-0x0000000075810000-memory.dmp

          Filesize

          2.1MB

        • memory/628-193-0x0000000074D10000-0x0000000074D8A000-memory.dmp

          Filesize

          488KB

        • memory/628-189-0x0000000074C80000-0x0000000074CA6000-memory.dmp

          Filesize

          152KB

        • memory/628-187-0x0000000075410000-0x0000000075579000-memory.dmp

          Filesize

          1.4MB

        • memory/628-184-0x0000000075A10000-0x0000000075AF3000-memory.dmp

          Filesize

          908KB

        • memory/628-173-0x0000000075580000-0x00000000755F4000-memory.dmp

          Filesize

          464KB