Analysis
-
max time kernel
122s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
-
submitted
23/07/2023, 19:02
General
-
Target
NA_NA_2876e2615d81bdexeexe_JC.exe
-
Size
386KB
-
MD5
2876e2615d81bde0e1120b75f7f1e675
-
SHA1
62bb5f550bf7f9eab10fcfc7415353106dfeb792
-
SHA256
4486c79a0c0f820b6e7e94e6e41a1292815efd06235646884da3116a6ad2ef8d
-
SHA512
f4b59f4d8850d288c82ae1b386d5b78fe22c5282156ae345348f31c53cf720851dff2ef383b156f63b4bafe96225f4c130f082cca5130c2c82bafe8de2303bf1
-
SSDEEP
12288:XplrVbDdQaqdS/ofraFErH8uB2Wm0SXsNr5FU:5xRQ+Fucuvm0as
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\NA_NA_2876e2615d81bdexeexe_JC.exe"C:\Users\Admin\AppData\Local\Temp\NA_NA_2876e2615d81bdexeexe_JC.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Swedish\commandline.exe"C:\Program Files\Swedish\commandline.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
386KB
MD5edeee10aedc47562c26f515ef8a490ae
SHA1dff61c7d0f745be59c01ae840e2f8f683dd16cbf
SHA256f8954463d27e3aca6d9f8971c05f6604d9d41e5ee2e4102f56752f53b81ed705
SHA512fffb1494535c091bc82e5f7627f3ec6922d44e4b927a35bfcede9879687fe2e411e5549a222c85a92694ae9fde3a02237c133d3be243b1f3982ed9833b5b6f45
-
Filesize
386KB
MD5edeee10aedc47562c26f515ef8a490ae
SHA1dff61c7d0f745be59c01ae840e2f8f683dd16cbf
SHA256f8954463d27e3aca6d9f8971c05f6604d9d41e5ee2e4102f56752f53b81ed705
SHA512fffb1494535c091bc82e5f7627f3ec6922d44e4b927a35bfcede9879687fe2e411e5549a222c85a92694ae9fde3a02237c133d3be243b1f3982ed9833b5b6f45
-
Filesize
386KB
MD5edeee10aedc47562c26f515ef8a490ae
SHA1dff61c7d0f745be59c01ae840e2f8f683dd16cbf
SHA256f8954463d27e3aca6d9f8971c05f6604d9d41e5ee2e4102f56752f53b81ed705
SHA512fffb1494535c091bc82e5f7627f3ec6922d44e4b927a35bfcede9879687fe2e411e5549a222c85a92694ae9fde3a02237c133d3be243b1f3982ed9833b5b6f45
-
Filesize
386KB
MD5edeee10aedc47562c26f515ef8a490ae
SHA1dff61c7d0f745be59c01ae840e2f8f683dd16cbf
SHA256f8954463d27e3aca6d9f8971c05f6604d9d41e5ee2e4102f56752f53b81ed705
SHA512fffb1494535c091bc82e5f7627f3ec6922d44e4b927a35bfcede9879687fe2e411e5549a222c85a92694ae9fde3a02237c133d3be243b1f3982ed9833b5b6f45