Analysis

  • max time kernel
    122s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19-08-2023 19:58

General

  • Target

    9f81bd2fd5b2ecc4208c3fdf7fa697ba03dceed456f02902340b63f9c14275fe.exe

  • Size

    2.8MB

  • MD5

    ebefa1ecbb66eab0b487a1e7696d7fc7

  • SHA1

    a0f757a4fc8d4632396888977dbebf516726286f

  • SHA256

    9f81bd2fd5b2ecc4208c3fdf7fa697ba03dceed456f02902340b63f9c14275fe

  • SHA512

    f48abc8c74480cd68af2242e58dd4a1d22a321434f10df02b55d7c595f0f0d2f0151bc00842370810fd667f9dc94b894dc85effa1a03981cfdf6743cd4a6876f

  • SSDEEP

    49152:YSf002h4OlG42bLghhcxcdRStaZ3McuJ:ffT2h4OlG42AdRQaZcc

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9f81bd2fd5b2ecc4208c3fdf7fa697ba03dceed456f02902340b63f9c14275fe.exe
    "C:\Users\Admin\AppData\Local\Temp\9f81bd2fd5b2ecc4208c3fdf7fa697ba03dceed456f02902340b63f9c14275fe.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of SetWindowsHookEx
    PID:1272

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\ExuiKrnln_Win32_20230812.lib

    Filesize

    1.6MB

    MD5

    3ea488a82fba1995e5d25b8a076389dd

    SHA1

    25c597347e9dd839778bb3d13db08787d63c518a

    SHA256

    66a2ffa3d87640746a66b0d59d81a53b52b17a10f3b1a85f3193e33d59eb0cd6

    SHA512

    df29c219d040be58d94dd46ed90d00141b4111dd00a01045eb45752463d33cca8167147b035ab7a4e09d64b753579978bbc08d72881ad723adafa79f01da88d2