Analysis

  • max time kernel
    118s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    26/08/2023, 22:05

General

  • Target

    98ad5c1d8b174d4a86bd002032fde53ef16dfb0ef7f868e3e57d7b49597eaec5.exe

  • Size

    3.1MB

  • MD5

    4a550c6b5217fc29958ca8a6324888f1

  • SHA1

    bb63d60b84d197177ccaf5ca5a27c00dfeb2e61d

  • SHA256

    98ad5c1d8b174d4a86bd002032fde53ef16dfb0ef7f868e3e57d7b49597eaec5

  • SHA512

    7f6daddd1dba304cac29bcbdccb51becfd557368440fb8883d0bf19a55e0832005a2808cfabd45f3b0e8ecea3a48959b3e59e63ad19f71b908c2b89c127c2267

  • SSDEEP

    98304:zfyxK6Nht8MQtjDbhCTV0Rqkx/Iwz4UQP2l:E1huMuYoqkx1yU

Score
5/10

Malware Config

Signatures

  • Drops file in System32 directory 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\98ad5c1d8b174d4a86bd002032fde53ef16dfb0ef7f868e3e57d7b49597eaec5.exe
    "C:\Users\Admin\AppData\Local\Temp\98ad5c1d8b174d4a86bd002032fde53ef16dfb0ef7f868e3e57d7b49597eaec5.exe"
    1⤵
    • Drops file in System32 directory
    • Suspicious use of SetWindowsHookEx
    PID:2072

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2072-0-0x00000000774D0000-0x00000000774D1000-memory.dmp

          Filesize

          4KB

        • memory/2072-2-0x0000000000360000-0x0000000000361000-memory.dmp

          Filesize

          4KB

        • memory/2072-1-0x00000000774C0000-0x0000000077640000-memory.dmp

          Filesize

          1.5MB

        • memory/2072-3-0x00000000774C0000-0x0000000077640000-memory.dmp

          Filesize

          1.5MB