Analysis

  • max time kernel
    31s
  • max time network
    34s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    15-06-2023 13:37

General

  • Target

    GWX_control_panel.exe

  • Size

    4.4MB

  • MD5

    c6ea8429c22c53bc7a738ffec4831429

  • SHA1

    ff89e1f50bdf778293e9cbbc91bf76aa5fa85143

  • SHA256

    bf0b2c1f38f2dde284c20ca0c4027495f52e52b35b846a1f655c6670816552c8

  • SHA512

    4ab5a451922c875fcb0e0f09df5a3fc8075f7727e9d1d550eecaf34b8230126816c271f0300ba1c9fa7a17d462c600d42316bb1522b1592eb89f4f8a8acf5855

  • SSDEEP

    98304:z8uWTz6+AlHKQhOkrdZ5O9pO+1t1c1X3gCKFLOAkGkzdnEVomFHKnPw:uzQ49pO+1t1c1gCKFLOyomFHKnPw

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 7 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\GWX_control_panel.exe
    "C:\Users\Admin\AppData\Local\Temp\GWX_control_panel.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1232

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1232-54-0x0000000076B80000-0x0000000076C1D000-memory.dmp

    Filesize

    628KB

  • memory/1232-55-0x0000000074D40000-0x0000000074DE0000-memory.dmp

    Filesize

    640KB

  • memory/1232-56-0x00000000749B0000-0x0000000074A01000-memory.dmp

    Filesize

    324KB

  • memory/1232-57-0x0000000075A60000-0x00000000766AA000-memory.dmp

    Filesize

    12.3MB

  • memory/1232-58-0x0000000075550000-0x00000000755A7000-memory.dmp

    Filesize

    348KB

  • memory/1232-59-0x0000000075900000-0x0000000075A5C000-memory.dmp

    Filesize

    1.4MB

  • memory/1232-60-0x00000000766B0000-0x000000007673F000-memory.dmp

    Filesize

    572KB

  • memory/1232-61-0x0000000074600000-0x0000000074790000-memory.dmp

    Filesize

    1.6MB

  • memory/1232-62-0x0000000074510000-0x00000000745FB000-memory.dmp

    Filesize

    940KB

  • memory/1232-63-0x0000000074EA0000-0x00000000750B5000-memory.dmp

    Filesize

    2.1MB

  • memory/1232-64-0x0000000074480000-0x00000000744B2000-memory.dmp

    Filesize

    200KB

  • memory/1232-65-0x0000000074400000-0x0000000074476000-memory.dmp

    Filesize

    472KB

  • memory/1232-66-0x00000000013B0000-0x000000000181C000-memory.dmp

    Filesize

    4.4MB

  • memory/1232-67-0x0000000074D40000-0x0000000074DE0000-memory.dmp

    Filesize

    640KB

  • memory/1232-68-0x00000000749B0000-0x0000000074A01000-memory.dmp

    Filesize

    324KB

  • memory/1232-69-0x0000000075A60000-0x00000000766AA000-memory.dmp

    Filesize

    12.3MB

  • memory/1232-70-0x0000000075550000-0x00000000755A7000-memory.dmp

    Filesize

    348KB

  • memory/1232-71-0x0000000074810000-0x00000000749AE000-memory.dmp

    Filesize

    1.6MB

  • memory/1232-76-0x0000000074510000-0x00000000745FB000-memory.dmp

    Filesize

    940KB

  • memory/1232-77-0x0000000074500000-0x0000000074509000-memory.dmp

    Filesize

    36KB

  • memory/1232-75-0x0000000074600000-0x0000000074790000-memory.dmp

    Filesize

    1.6MB

  • memory/1232-74-0x00000000766B0000-0x000000007673F000-memory.dmp

    Filesize

    572KB

  • memory/1232-73-0x0000000075900000-0x0000000075A5C000-memory.dmp

    Filesize

    1.4MB

  • memory/1232-78-0x0000000074EA0000-0x00000000750B5000-memory.dmp

    Filesize

    2.1MB

  • memory/1232-79-0x00000000744C0000-0x00000000744FC000-memory.dmp

    Filesize

    240KB

  • memory/1232-81-0x0000000074480000-0x00000000744B2000-memory.dmp

    Filesize

    200KB

  • memory/1232-82-0x0000000074400000-0x0000000074476000-memory.dmp

    Filesize

    472KB

  • memory/1232-83-0x00000000013B0000-0x000000000181C000-memory.dmp

    Filesize

    4.4MB

  • memory/1232-85-0x0000000074D40000-0x0000000074DE0000-memory.dmp

    Filesize

    640KB

  • memory/1232-84-0x0000000076B80000-0x0000000076C1D000-memory.dmp

    Filesize

    628KB

  • memory/1232-88-0x0000000074810000-0x00000000749AE000-memory.dmp

    Filesize

    1.6MB

  • memory/1232-87-0x0000000075550000-0x00000000755A7000-memory.dmp

    Filesize

    348KB

  • memory/1232-86-0x00000000749B0000-0x0000000074A01000-memory.dmp

    Filesize

    324KB

  • memory/1232-91-0x0000000074EA0000-0x00000000750B5000-memory.dmp

    Filesize

    2.1MB

  • memory/1232-92-0x00000000744C0000-0x00000000744FC000-memory.dmp

    Filesize

    240KB

  • memory/1232-90-0x00000000766B0000-0x000000007673F000-memory.dmp

    Filesize

    572KB

  • memory/1232-93-0x0000000074480000-0x00000000744B2000-memory.dmp

    Filesize

    200KB

  • memory/1232-94-0x0000000074D40000-0x0000000074DE0000-memory.dmp

    Filesize

    640KB

  • memory/1232-95-0x00000000749B0000-0x0000000074A01000-memory.dmp

    Filesize

    324KB

  • memory/1232-97-0x0000000074810000-0x00000000749AE000-memory.dmp

    Filesize

    1.6MB

  • memory/1232-96-0x0000000075550000-0x00000000755A7000-memory.dmp

    Filesize

    348KB

  • memory/1232-99-0x0000000074600000-0x0000000074790000-memory.dmp

    Filesize

    1.6MB

  • memory/1232-100-0x0000000074500000-0x0000000074509000-memory.dmp

    Filesize

    36KB

  • memory/1232-102-0x00000000744C0000-0x00000000744FC000-memory.dmp

    Filesize

    240KB

  • memory/1232-101-0x0000000074EA0000-0x00000000750B5000-memory.dmp

    Filesize

    2.1MB

  • memory/1232-103-0x0000000074480000-0x00000000744B2000-memory.dmp

    Filesize

    200KB

  • memory/1232-106-0x0000000074D40000-0x0000000074DE0000-memory.dmp

    Filesize

    640KB

  • memory/1232-105-0x0000000076B80000-0x0000000076C1D000-memory.dmp

    Filesize

    628KB

  • memory/1232-104-0x00000000013B0000-0x000000000181C000-memory.dmp

    Filesize

    4.4MB

  • memory/1232-108-0x0000000075550000-0x00000000755A7000-memory.dmp

    Filesize

    348KB

  • memory/1232-107-0x00000000749B0000-0x0000000074A01000-memory.dmp

    Filesize

    324KB

  • memory/1232-109-0x0000000074810000-0x00000000749AE000-memory.dmp

    Filesize

    1.6MB

  • memory/1232-111-0x00000000766B0000-0x000000007673F000-memory.dmp

    Filesize

    572KB

  • memory/1232-112-0x0000000074600000-0x0000000074790000-memory.dmp

    Filesize

    1.6MB

  • memory/1232-115-0x00000000744C0000-0x00000000744FC000-memory.dmp

    Filesize

    240KB

  • memory/1232-114-0x0000000074EA0000-0x00000000750B5000-memory.dmp

    Filesize

    2.1MB

  • memory/1232-113-0x0000000074500000-0x0000000074509000-memory.dmp

    Filesize

    36KB

  • memory/1232-117-0x0000000074480000-0x00000000744B2000-memory.dmp

    Filesize

    200KB

  • memory/1232-118-0x0000000074400000-0x0000000074476000-memory.dmp

    Filesize

    472KB

  • memory/1232-119-0x00000000013B0000-0x000000000181C000-memory.dmp

    Filesize

    4.4MB

  • memory/1232-123-0x00000000013B0000-0x000000000181C000-memory.dmp

    Filesize

    4.4MB

  • memory/1232-122-0x0000000074400000-0x0000000074476000-memory.dmp

    Filesize

    472KB

  • memory/1232-121-0x0000000074600000-0x0000000074790000-memory.dmp

    Filesize

    1.6MB

  • memory/1232-120-0x0000000075550000-0x00000000755A7000-memory.dmp

    Filesize

    348KB