Analysis
-
max time kernel
118s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system -
submitted
25-08-2023 20:32
Static task
static1
Behavioral task
behavioral1
Sample
5414f0763e78bed8ed28ab516131274a055f5dfd4da27a0a3d0ebd5077625e3f.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
5414f0763e78bed8ed28ab516131274a055f5dfd4da27a0a3d0ebd5077625e3f.exe
Resource
win10v2004-20230703-en
General
-
Target
5414f0763e78bed8ed28ab516131274a055f5dfd4da27a0a3d0ebd5077625e3f.exe
-
Size
4.0MB
-
MD5
61eb45372cd2c3a8680bd8ed2598630a
-
SHA1
ae67b116459bd0cd97b963474da2836ef9ebf7ec
-
SHA256
5414f0763e78bed8ed28ab516131274a055f5dfd4da27a0a3d0ebd5077625e3f
-
SHA512
20c5574498f927e838a5a734f6962ccefcbd3709f6b577e1d8ea59bb48586bf856d2e6c8da7fc7ad2b868ddd1a8a4d1453dc3bd8f3313bfbc873b15b4e166a1c
-
SSDEEP
49152:MQSyfEGdNTdVEgHztu+thX44ifGJtSqeQLgza6BDm5TN+IMUu9+d1cL+p:ppEGdrVzArOSqeDalc6dR
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 1936 5414f0763e78bed8ed28ab516131274a055f5dfd4da27a0a3d0ebd5077625e3f.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1936 5414f0763e78bed8ed28ab516131274a055f5dfd4da27a0a3d0ebd5077625e3f.exe 1936 5414f0763e78bed8ed28ab516131274a055f5dfd4da27a0a3d0ebd5077625e3f.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8.4MB
MD58b6c94bbdbfb213e94a5dcb4fac28ce3
SHA1b56102ca4f03556f387f8b30e2b404efabe0cb65
SHA256982a177924762f270b36fe34c7d6847392b48ae53151dc2011078dceef487a53
SHA5129d6d63b5d8cf7a978d7e91126d7a343c2f7acd00022da9d692f63e50835fdd84a59a93328564f10622f2b1f6adfd7febdd98b8ddb294d0754ed45cc9c165d25a