Analysis
-
max time kernel
139s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
28/08/2023, 05:19
Static task
static1
Behavioral task
behavioral1
Sample
76e770e458c2f75b8f36d7e1fb1b6f4f1139b4e2afabdcde51d49035ceb45147.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
76e770e458c2f75b8f36d7e1fb1b6f4f1139b4e2afabdcde51d49035ceb45147.exe
Resource
win10v2004-20230703-en
General
-
Target
76e770e458c2f75b8f36d7e1fb1b6f4f1139b4e2afabdcde51d49035ceb45147.exe
-
Size
4.1MB
-
MD5
7282129cc2d31713e4d2c55e4773f7e7
-
SHA1
bbd4a582bae777ee4b051ac1e09a3fc5910e3771
-
SHA256
76e770e458c2f75b8f36d7e1fb1b6f4f1139b4e2afabdcde51d49035ceb45147
-
SHA512
7d1002ab9206f8380eaa6214c03057025146dff5f0d2a7e571df2db063fd8aff0da0b055e5fea742e3bce0d12648a9e5118aa2206d6cfbed02b6e5bf50dac883
-
SSDEEP
49152:5ywMCJTxM53pOY+F/ieiCes4fYn2o4Bpo3aVfm2RTSY6JQyTy+s8KuqGaX0ToIBl:1MkTxM5Z5+fJes4fJobqVFx6JBAUZLpP
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2860 76e770e458c2f75b8f36d7e1fb1b6f4f1139b4e2afabdcde51d49035ceb45147.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2860 76e770e458c2f75b8f36d7e1fb1b6f4f1139b4e2afabdcde51d49035ceb45147.exe 2860 76e770e458c2f75b8f36d7e1fb1b6f4f1139b4e2afabdcde51d49035ceb45147.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2860 76e770e458c2f75b8f36d7e1fb1b6f4f1139b4e2afabdcde51d49035ceb45147.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2860 76e770e458c2f75b8f36d7e1fb1b6f4f1139b4e2afabdcde51d49035ceb45147.exe 2860 76e770e458c2f75b8f36d7e1fb1b6f4f1139b4e2afabdcde51d49035ceb45147.exe 2860 76e770e458c2f75b8f36d7e1fb1b6f4f1139b4e2afabdcde51d49035ceb45147.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\76e770e458c2f75b8f36d7e1fb1b6f4f1139b4e2afabdcde51d49035ceb45147.exe"C:\Users\Admin\AppData\Local\Temp\76e770e458c2f75b8f36d7e1fb1b6f4f1139b4e2afabdcde51d49035ceb45147.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2860
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
645KB
MD57acc7c3bff0126272adfadf36e485bca
SHA13018995638619dcb684b639f6e5978ec939c10fc
SHA25611f300ccb52fb878aa5bac3711e97bb99d89628af80c078e8f9b8287aab097cd
SHA512e18a2b3c3622146473dea71b61c18ffc5b15a6fd8b8889a0300636b21c9ce2e1b620b6d6f5d3da77e45ab63785437094c8fc809a1042e6aa874a97da49268753