Analysis
-
max time kernel
149s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
23/08/2023, 00:37
Static task
static1
Behavioral task
behavioral1
Sample
3a9fa45c68e275082f8e4b10cc15e07e01409e195423579a8071d3cd7984b342.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
3a9fa45c68e275082f8e4b10cc15e07e01409e195423579a8071d3cd7984b342.exe
Resource
win10v2004-20230703-en
General
-
Target
3a9fa45c68e275082f8e4b10cc15e07e01409e195423579a8071d3cd7984b342.exe
-
Size
36KB
-
MD5
a3ba6e4ffb5641b7e03299433ed50d46
-
SHA1
68ccbd46707443b4f7ff5c750c6a0aab2f16ee10
-
SHA256
3a9fa45c68e275082f8e4b10cc15e07e01409e195423579a8071d3cd7984b342
-
SHA512
8c536a6c9a42e86a343709adb393171eeb615b6ce650dc68ba9f0d283ae2de3e024cb62f8542e222dc29a81b5aa3d7e73cf1c703dfb8ec450dd7290e3032eadb
-
SSDEEP
384:i+47YFzTxIx1w/jpHowi/xCZhP5xMnIEhGPRUl/:i+47Y/IxOlH3i/xCXo9ueJ
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 536 3a9fa45c68e275082f8e4b10cc15e07e01409e195423579a8071d3cd7984b342.exe 536 3a9fa45c68e275082f8e4b10cc15e07e01409e195423579a8071d3cd7984b342.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
48B
MD50c643629b6659a5d9b751c9310906167
SHA1d151a276b8249651a4020b4d3fe85793c57a8f78
SHA2566f1212c06d8a63aaec113460b5d8b06956c98517bda26cd707bd5ba41e2f4ad4
SHA512be36d937e826747c5910b8f38797527baeb19da4a2b86736e5f249e3172c3e6412795674a82ba8e29835b85f6a5fcbd90baf3f3220030cfed3a42caa53a1d1ac