Analysis

  • max time kernel
    150s
  • max time network
    33s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    20-06-2023 19:44

General

  • Target

    ea61bf9ea15c19fcb49d6ad4b9ea189f069695048eda24d7f661fb0a036de615.exe

  • Size

    368KB

  • MD5

    8ec1269d2aa238a8bc46be7a8f60e515

  • SHA1

    cad2b53cdc3b6fc518cc516b0ed4b9501cf20fbc

  • SHA256

    ea61bf9ea15c19fcb49d6ad4b9ea189f069695048eda24d7f661fb0a036de615

  • SHA512

    4adaee1981fc6d7526ec258c09dd0f9b1c15343c39d8793ca601f68a8c6204c5c29e51771acaa4aaf7baf62f644ada635220228509916a0ea42a13790fb4a090

  • SSDEEP

    6144:nBlM+WhwJ1aEl6huVK7xwJCRQwWQLWeGbnmDlSnRoGh5CWBslVbbdpPiUVY:nM+WmVkhuVUtQwWGCmDOL6lbbdpia

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ea61bf9ea15c19fcb49d6ad4b9ea189f069695048eda24d7f661fb0a036de615.exe
    "C:\Users\Admin\AppData\Local\Temp\ea61bf9ea15c19fcb49d6ad4b9ea189f069695048eda24d7f661fb0a036de615.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1644

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1644-54-0x0000000000400000-0x0000000000509000-memory.dmp
    Filesize

    1.0MB

  • memory/1644-56-0x0000000000400000-0x0000000000509000-memory.dmp
    Filesize

    1.0MB

  • memory/1644-55-0x0000000000400000-0x0000000000509000-memory.dmp
    Filesize

    1.0MB

  • memory/1644-57-0x0000000000400000-0x0000000000509000-memory.dmp
    Filesize

    1.0MB

  • memory/1644-58-0x0000000000400000-0x0000000000509000-memory.dmp
    Filesize

    1.0MB

  • memory/1644-59-0x0000000000400000-0x0000000000509000-memory.dmp
    Filesize

    1.0MB

  • memory/1644-60-0x0000000000400000-0x0000000000509000-memory.dmp
    Filesize

    1.0MB

  • memory/1644-61-0x0000000000400000-0x0000000000509000-memory.dmp
    Filesize

    1.0MB

  • memory/1644-62-0x0000000000400000-0x0000000000509000-memory.dmp
    Filesize

    1.0MB

  • memory/1644-63-0x0000000000400000-0x0000000000509000-memory.dmp
    Filesize

    1.0MB

  • memory/1644-64-0x0000000000400000-0x0000000000509000-memory.dmp
    Filesize

    1.0MB

  • memory/1644-65-0x0000000000400000-0x0000000000509000-memory.dmp
    Filesize

    1.0MB

  • memory/1644-66-0x0000000000400000-0x0000000000509000-memory.dmp
    Filesize

    1.0MB

  • memory/1644-67-0x0000000000400000-0x0000000000509000-memory.dmp
    Filesize

    1.0MB

  • memory/1644-68-0x0000000000400000-0x0000000000509000-memory.dmp
    Filesize

    1.0MB

  • memory/1644-69-0x0000000000400000-0x0000000000509000-memory.dmp
    Filesize

    1.0MB

  • memory/1644-70-0x0000000000400000-0x0000000000509000-memory.dmp
    Filesize

    1.0MB

  • memory/1644-71-0x0000000000400000-0x0000000000509000-memory.dmp
    Filesize

    1.0MB

  • memory/1644-72-0x0000000000400000-0x0000000000509000-memory.dmp
    Filesize

    1.0MB

  • memory/1644-73-0x0000000000400000-0x0000000000509000-memory.dmp
    Filesize

    1.0MB