Analysis
-
max time kernel
122s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
19-08-2023 19:58
Static task
static1
Behavioral task
behavioral1
Sample
9f81bd2fd5b2ecc4208c3fdf7fa697ba03dceed456f02902340b63f9c14275fe.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
9f81bd2fd5b2ecc4208c3fdf7fa697ba03dceed456f02902340b63f9c14275fe.exe
Resource
win10v2004-20230703-en
General
-
Target
9f81bd2fd5b2ecc4208c3fdf7fa697ba03dceed456f02902340b63f9c14275fe.exe
-
Size
2.8MB
-
MD5
ebefa1ecbb66eab0b487a1e7696d7fc7
-
SHA1
a0f757a4fc8d4632396888977dbebf516726286f
-
SHA256
9f81bd2fd5b2ecc4208c3fdf7fa697ba03dceed456f02902340b63f9c14275fe
-
SHA512
f48abc8c74480cd68af2242e58dd4a1d22a321434f10df02b55d7c595f0f0d2f0151bc00842370810fd667f9dc94b894dc85effa1a03981cfdf6743cd4a6876f
-
SSDEEP
49152:YSf002h4OlG42bLghhcxcdRStaZ3McuJ:ffT2h4OlG42AdRQaZcc
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 1272 9f81bd2fd5b2ecc4208c3fdf7fa697ba03dceed456f02902340b63f9c14275fe.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1272 9f81bd2fd5b2ecc4208c3fdf7fa697ba03dceed456f02902340b63f9c14275fe.exe 1272 9f81bd2fd5b2ecc4208c3fdf7fa697ba03dceed456f02902340b63f9c14275fe.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.6MB
MD53ea488a82fba1995e5d25b8a076389dd
SHA125c597347e9dd839778bb3d13db08787d63c518a
SHA25666a2ffa3d87640746a66b0d59d81a53b52b17a10f3b1a85f3193e33d59eb0cd6
SHA512df29c219d040be58d94dd46ed90d00141b4111dd00a01045eb45752463d33cca8167147b035ab7a4e09d64b753579978bbc08d72881ad723adafa79f01da88d2