Analysis

  • max time kernel
    127s
  • max time network
    133s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21-08-2023 20:45

General

  • Target

    b8099b5a0e3bfe8aab400db9269b9b18690fc8ef344a6ab13a7b6cd1fbcac67e.exe

  • Size

    4.9MB

  • MD5

    c08dab76a7ae8277fb52fdd0ef79f966

  • SHA1

    486246bb6a6ef3a023547b2a52b0a7e9cc21b466

  • SHA256

    b8099b5a0e3bfe8aab400db9269b9b18690fc8ef344a6ab13a7b6cd1fbcac67e

  • SHA512

    30882c66648917af65e9ecca488241c5a8b19f4363b207b07ebae24e42fad949b8c270a9d0ea5c5232e4bbd283d9c992d0f6f964fa60e8f427219448747347ce

  • SSDEEP

    98304:/q/RHgUUTvgbX6+GZMxxxhGqHFIatNcAdRQaZcc:+PUT46Mxx9d

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b8099b5a0e3bfe8aab400db9269b9b18690fc8ef344a6ab13a7b6cd1fbcac67e.exe
    "C:\Users\Admin\AppData\Local\Temp\b8099b5a0e3bfe8aab400db9269b9b18690fc8ef344a6ab13a7b6cd1fbcac67e.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of SetWindowsHookEx
    PID:4460

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\ExuiKrnln_Win32_20230812.lib

    Filesize

    1.6MB

    MD5

    3ea488a82fba1995e5d25b8a076389dd

    SHA1

    25c597347e9dd839778bb3d13db08787d63c518a

    SHA256

    66a2ffa3d87640746a66b0d59d81a53b52b17a10f3b1a85f3193e33d59eb0cd6

    SHA512

    df29c219d040be58d94dd46ed90d00141b4111dd00a01045eb45752463d33cca8167147b035ab7a4e09d64b753579978bbc08d72881ad723adafa79f01da88d2