Analysis

  • max time kernel
    40s
  • max time network
    45s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    14-07-2023 19:37

General

  • Target

    MonkeModManager.exe

  • Size

    217KB

  • MD5

    1d62aa3d19462f3d5575fc54159911b4

  • SHA1

    b37eab86c0075245fcc517a280f0705f6dffb852

  • SHA256

    6acaae0fb470790102a338e23dfe2263f31e529288e4efe51b34bca30371cb36

  • SHA512

    78a9501d7920920577a586396e5d9e2278a7c926448c9a98d7844db9032dbd887df90d2f389fe1754bf5a2071a19dfd5d40315624923e903ef9ef6cbb214b1df

  • SSDEEP

    3072:V9UmbMwyLMmJx+WAE090AF23P88RiiE090HjD:Kxs/E09hWPTE09yD

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 31 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\MonkeModManager.exe
    "C:\Users\Admin\AppData\Local\Temp\MonkeModManager.exe"
    1⤵
    • Modifies registry class
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:2236
  • C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    1⤵
      PID:2276

    Network

    MITRE ATT&CK Enterprise v6

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2236-54-0x0000000000CC0000-0x0000000000CFC000-memory.dmp

      Filesize

      240KB

    • memory/2236-55-0x000007FEF54C0000-0x000007FEF5EAC000-memory.dmp

      Filesize

      9.9MB

    • memory/2236-56-0x000000001AF00000-0x000000001AF80000-memory.dmp

      Filesize

      512KB

    • memory/2236-57-0x000000001AF00000-0x000000001AF80000-memory.dmp

      Filesize

      512KB

    • memory/2236-58-0x000000001AF00000-0x000000001AF80000-memory.dmp

      Filesize

      512KB

    • memory/2236-59-0x000000001C3E0000-0x000000001C3E1000-memory.dmp

      Filesize

      4KB

    • memory/2236-60-0x000000001C540000-0x000000001C550000-memory.dmp

      Filesize

      64KB

    • memory/2236-61-0x000007FEF54C0000-0x000007FEF5EAC000-memory.dmp

      Filesize

      9.9MB

    • memory/2236-62-0x000000001AF00000-0x000000001AF80000-memory.dmp

      Filesize

      512KB

    • memory/2236-63-0x000000001C3E0000-0x000000001C3E1000-memory.dmp

      Filesize

      4KB

    • memory/2236-64-0x000007FEF54C0000-0x000007FEF5EAC000-memory.dmp

      Filesize

      9.9MB