Analysis
-
max time kernel
122s -
max time network
130s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system -
submitted
20/08/2023, 02:49
Static task
static1
Behavioral task
behavioral1
Sample
bae6f479334b74f00db6748b9dcb27b84358d538ef031e909d0a9f38895b62ee.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
bae6f479334b74f00db6748b9dcb27b84358d538ef031e909d0a9f38895b62ee.exe
Resource
win10v2004-20230703-en
General
-
Target
bae6f479334b74f00db6748b9dcb27b84358d538ef031e909d0a9f38895b62ee.exe
-
Size
1.1MB
-
MD5
b006b82767444bdd938bac94ea0c5cd9
-
SHA1
2e0abcae930afe8e5456a546ac7695d137f07158
-
SHA256
bae6f479334b74f00db6748b9dcb27b84358d538ef031e909d0a9f38895b62ee
-
SHA512
ee82d39462ac0299ab387483f9585bc541eaa592a2ac47c09238f5c03702b78641bf6def440d0f97d8e7e78064e3296d2d0cc886f7bd94eed47f3d3e93ca276f
-
SSDEEP
12288:xcty2HXsD80RANjMK4nnD9Vnpx4eRFVuw9j/dbskJ/vR+AkSlRTySK:xct/X3EAVMnD93FVuYdA6RxxLK
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2592 bae6f479334b74f00db6748b9dcb27b84358d538ef031e909d0a9f38895b62ee.exe -
resource yara_rule behavioral1/memory/2592-59-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/2592-62-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/2592-61-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/2592-63-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/2592-65-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/2592-67-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/2592-64-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/2592-71-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/2592-69-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/2592-74-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/2592-80-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/2592-78-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/2592-76-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/2592-83-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/2592-86-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/2592-88-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/2592-90-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/2592-92-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/2592-94-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/2592-96-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/2592-98-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/2592-100-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/2592-102-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/2592-104-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/2592-106-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/2592-108-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral1/memory/2592-110-0x0000000010000000-0x000000001003D000-memory.dmp upx -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2592 bae6f479334b74f00db6748b9dcb27b84358d538ef031e909d0a9f38895b62ee.exe 2592 bae6f479334b74f00db6748b9dcb27b84358d538ef031e909d0a9f38895b62ee.exe 2592 bae6f479334b74f00db6748b9dcb27b84358d538ef031e909d0a9f38895b62ee.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
306KB
MD56097a8eb959f58a4cbc6de99310bf73d
SHA1a74a1d89a6b49b3ec2cd438cce7dcd0a217753fc
SHA256c730eff648de62e6a2773a6ba2b5fbf6024dea0567491c77797d771fb006d387
SHA512c6efd8741474ecf8a94ad68a60437b308532987667ec4b356b9af98b2a57e26583b130df2a71c39f3c7b56f0c6ef33efc0647b069af379ec85b6d41eef7a47c8