Analysis
-
max time kernel
121s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
-
submitted
19/07/2023, 15:58
General
-
Target
f768faaa7e227fexe_JC.exe
-
Size
238KB
-
MD5
f768faaa7e227fe847f39189b4e313d6
-
SHA1
366df218183a9379e95e6b3dd21cbab6b19b76dc
-
SHA256
26cbe1c18fb1af7b887babefef11c668f4df546516f2c6ce2b14e667efdfe86f
-
SHA512
edef7a1516f5a396ab0e97299f91046d460c9bc4ba9ed70b2495eba20c731d85e0923a37fd546e23d3cddbc00c8f1362fee50bbad59df690dd5b0a6fe99b0a67
-
SSDEEP
3072:lxUm75Fku3eKeO213SJReOqdmErj+HyHnNVIPL/+ybbiW1u46Q7qV3lU8xM:fU8Dk11CJ1qDWUNVIT/bblS9x
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f768faaa7e227fexe_JC.exe"C:\Users\Admin\AppData\Local\Temp\f768faaa7e227fexe_JC.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\MessageBox\upgraded..exe"C:\Program Files\MessageBox\upgraded..exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
239KB
MD59dcd061b339e3c3aa5e2ff47cbc4004e
SHA129fb2f72682099861d99b8da3efb706e78e23282
SHA256cc94294200320932ebbdaf956fd75b0352c6ebb208f5a79c74d184e0d0480e37
SHA512b3758b8d207b874d129d8baefb3582b173a848d55a435437c6ca95259cd762047118cdab3bf4ecbc6959e9cdba9dc6a0a1f202b4adad190cc69a0263592cccfc
-
Filesize
239KB
MD59dcd061b339e3c3aa5e2ff47cbc4004e
SHA129fb2f72682099861d99b8da3efb706e78e23282
SHA256cc94294200320932ebbdaf956fd75b0352c6ebb208f5a79c74d184e0d0480e37
SHA512b3758b8d207b874d129d8baefb3582b173a848d55a435437c6ca95259cd762047118cdab3bf4ecbc6959e9cdba9dc6a0a1f202b4adad190cc69a0263592cccfc
-
Filesize
239KB
MD59dcd061b339e3c3aa5e2ff47cbc4004e
SHA129fb2f72682099861d99b8da3efb706e78e23282
SHA256cc94294200320932ebbdaf956fd75b0352c6ebb208f5a79c74d184e0d0480e37
SHA512b3758b8d207b874d129d8baefb3582b173a848d55a435437c6ca95259cd762047118cdab3bf4ecbc6959e9cdba9dc6a0a1f202b4adad190cc69a0263592cccfc
-
Filesize
239KB
MD59dcd061b339e3c3aa5e2ff47cbc4004e
SHA129fb2f72682099861d99b8da3efb706e78e23282
SHA256cc94294200320932ebbdaf956fd75b0352c6ebb208f5a79c74d184e0d0480e37
SHA512b3758b8d207b874d129d8baefb3582b173a848d55a435437c6ca95259cd762047118cdab3bf4ecbc6959e9cdba9dc6a0a1f202b4adad190cc69a0263592cccfc