Analysis
-
max time kernel
140s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
-
submitted
23-07-2023 15:32
General
-
Target
NA_NA_0e4b6a77bb956dexeexe_JC.exe
-
Size
405KB
-
MD5
0e4b6a77bb956dfa973bb228739d3137
-
SHA1
3f3732eea4a1e44292d339c1fd62c85428445ea6
-
SHA256
0d1f64ae27a7d9c229f47f7731272db57a48027ae74180901672cc0545b0e942
-
SHA512
9490c673f7ab6336cfa2d4e27eb5613de1840110a8c59c0d41ff2ffc46903169e0266401bb1a6473bc8152b17961f89e34bc07e401c6c82d348788e7834d035a
-
SSDEEP
12288:EplrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:AxRQ+Fucuvm0as
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\NA_NA_0e4b6a77bb956dexeexe_JC.exe"C:\Users\Admin\AppData\Local\Temp\NA_NA_0e4b6a77bb956dexeexe_JC.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Morgan\Kaufmann.exe"C:\Program Files\Morgan\Kaufmann.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
406KB
MD5da2997ca6e2bf7142cb1f8d55b69ddac
SHA1571123cbc0f3c34ba2ab14482d06db3c77013b9c
SHA256aa31d8c9222b646d8c3bd78100b54984320322f9a625cc5184fc846f3c2d54a4
SHA51296b17a019c5574ebcfc7d4c83ee76e66f388887fd876ddb88055b42663a142cf1e27f1017f49d8d4f2b5646fbe8b8cd7944d1c7e304eba76c0acd6e2419e6afa
-
Filesize
406KB
MD5da2997ca6e2bf7142cb1f8d55b69ddac
SHA1571123cbc0f3c34ba2ab14482d06db3c77013b9c
SHA256aa31d8c9222b646d8c3bd78100b54984320322f9a625cc5184fc846f3c2d54a4
SHA51296b17a019c5574ebcfc7d4c83ee76e66f388887fd876ddb88055b42663a142cf1e27f1017f49d8d4f2b5646fbe8b8cd7944d1c7e304eba76c0acd6e2419e6afa