Overview

overview

7

Static

static

3

37137bab14...ex.exe

windows7-x64

7

37137bab14...ex.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    76s
  • max time network
    79s
  • platform
    windows7_x64
  • resource
    win7-20230703-en
  • resource tags

    arch:x64arch:x86image:win7-20230703-enlocale:en-usos:windows7-x64system
  • submitted
    06-07-2023 15:35

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    37137bab146e5fexeexeexeex.exe

  • Size

    365KB

  • MD5

    37137bab146e5f630f3f541d35e9ad95

  • SHA1

    203e893c624e1a2411321ac881fe4e52ba07860b

  • SHA256

    026da29c89fc336b6d3c12ed0878ab3eb21e0c77d7c24833e1029505a195d32c

  • SHA512

    0695b13561d21afffea8bd619bc3365098e5ff1aa194f437d908970e61501ce05dde37738fd85b3b1f4e4742dc7c13490dc59788760181cd2881ac8179d87e2f

  • SSDEEP

    6144:SplrlbbDdQaqd2X/96fr3KFEUGjr8uB2WgcA0cpXEVNrvGZ4FUqm6:SplrVbDdQaqdS/ofraFErH8uB2Wm0SXj

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 2 IoCs
  • Drops file in Program Files directory 1 IoCs
  • Suspicious use of SetWindowsHookEx 8 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\37137bab146e5fexeexeexeex.exe
    "C:\Users\Admin\AppData\Local\Temp\37137bab146e5fexeexeexeex.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in Program Files directory
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2952
    • C:\Program Files\verify\Framework.exe
      "C:\Program Files\verify\Framework.exe" "33201"
      2⤵
      • Executes dropped EXE
      • Suspicious use of SetWindowsHookEx
      PID:3028

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Program Files\verify\Framework.exe
    Filesize

    366KB

    MD5

    0826d0357fdc3d14b282b1fbe3a6211a

    SHA1

    7be4a45b6396efccfaef5a44c7cdf589b7c40152

    SHA256

    290565a893e1d89f5a92fcdd199272a2bcf15f365824d11941d1a757c7e65b57

    SHA512

    9200d9a35afa83a4316537fea10c8043e9a95156be1432055d875bb68008fec32b96918cc1068ee1f9f76fcd26d9ee22e4fa39d3323dad2d46446dd40a55c565

    Download Submit

  • C:\Program Files\verify\Framework.exe
    Filesize

    366KB

    MD5

    0826d0357fdc3d14b282b1fbe3a6211a

    SHA1

    7be4a45b6396efccfaef5a44c7cdf589b7c40152

    SHA256

    290565a893e1d89f5a92fcdd199272a2bcf15f365824d11941d1a757c7e65b57

    SHA512

    9200d9a35afa83a4316537fea10c8043e9a95156be1432055d875bb68008fec32b96918cc1068ee1f9f76fcd26d9ee22e4fa39d3323dad2d46446dd40a55c565

    Download Submit

  • \Program Files\verify\Framework.exe
    Filesize

    366KB

    MD5

    0826d0357fdc3d14b282b1fbe3a6211a

    SHA1

    7be4a45b6396efccfaef5a44c7cdf589b7c40152

    SHA256

    290565a893e1d89f5a92fcdd199272a2bcf15f365824d11941d1a757c7e65b57

    SHA512

    9200d9a35afa83a4316537fea10c8043e9a95156be1432055d875bb68008fec32b96918cc1068ee1f9f76fcd26d9ee22e4fa39d3323dad2d46446dd40a55c565

    Download Submit

  • \Program Files\verify\Framework.exe
    Filesize

    366KB

    MD5

    0826d0357fdc3d14b282b1fbe3a6211a

    SHA1

    7be4a45b6396efccfaef5a44c7cdf589b7c40152

    SHA256

    290565a893e1d89f5a92fcdd199272a2bcf15f365824d11941d1a757c7e65b57

    SHA512

    9200d9a35afa83a4316537fea10c8043e9a95156be1432055d875bb68008fec32b96918cc1068ee1f9f76fcd26d9ee22e4fa39d3323dad2d46446dd40a55c565

    Download Submit