Analysis
-
max time kernel
138s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
30/08/2023, 22:28
Static task
static1
Behavioral task
behavioral1
Sample
7caae212717892ce8622c08e6cf10f0e201eba97a04d6eaa70d1c9528dbca9d1.exe
Resource
win7-20230712-en
General
-
Target
7caae212717892ce8622c08e6cf10f0e201eba97a04d6eaa70d1c9528dbca9d1.exe
-
Size
12.8MB
-
MD5
bf945a1a60cde7011e96a5d87698ea46
-
SHA1
3c69b680049e9532809bd18b29ce13062460d632
-
SHA256
7caae212717892ce8622c08e6cf10f0e201eba97a04d6eaa70d1c9528dbca9d1
-
SHA512
5224877df82d62da30d157e1e1639b6fa5e15d1f35d07c876e895e421ef74677073fa835cbfb24ee9037d766e380ec3704ed624ba89ed5bc62558f099054fd5d
-
SSDEEP
196608://71K1kv0dB+qs5AOhVvsnVW2AYTxFoSt3twnyJVmc9BDal7:bua0doqXObgVJxLdtwnyWc9sB
Malware Config
Signatures
-
resource yara_rule behavioral2/files/0x00060000000231f2-10.dat aspack_v212_v242 behavioral2/files/0x00060000000231f2-15.dat aspack_v212_v242 -
Loads dropped DLL 2 IoCs
pid Process 532 7caae212717892ce8622c08e6cf10f0e201eba97a04d6eaa70d1c9528dbca9d1.exe 532 7caae212717892ce8622c08e6cf10f0e201eba97a04d6eaa70d1c9528dbca9d1.exe -
resource yara_rule behavioral2/memory/532-6-0x0000000003360000-0x000000000336B000-memory.dmp upx behavioral2/memory/532-7-0x0000000003360000-0x000000000336B000-memory.dmp upx -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 532 7caae212717892ce8622c08e6cf10f0e201eba97a04d6eaa70d1c9528dbca9d1.exe 532 7caae212717892ce8622c08e6cf10f0e201eba97a04d6eaa70d1c9528dbca9d1.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8.4MB
MD58b6c94bbdbfb213e94a5dcb4fac28ce3
SHA1b56102ca4f03556f387f8b30e2b404efabe0cb65
SHA256982a177924762f270b36fe34c7d6847392b48ae53151dc2011078dceef487a53
SHA5129d6d63b5d8cf7a978d7e91126d7a343c2f7acd00022da9d692f63e50835fdd84a59a93328564f10622f2b1f6adfd7febdd98b8ddb294d0754ed45cc9c165d25a
-
Filesize
5.3MB
MD5df4a7169a40076a80d7d3dd4604ec23d
SHA1a1e277aa1ee35c241e04211744b65ba2e4be71e6
SHA256b703235a36967a154d7443c25b0006b780b845aba1065ad4da94c87bf0186563
SHA512eae9e960f65813e0725354993cb106a5c227ee12c160a7a7cb09ab31a56ff270e33298ebcf4380735eac8a38223c6855dbce644700a9a4e95d8e8f5291d6b084
-
Filesize
5.3MB
MD5df4a7169a40076a80d7d3dd4604ec23d
SHA1a1e277aa1ee35c241e04211744b65ba2e4be71e6
SHA256b703235a36967a154d7443c25b0006b780b845aba1065ad4da94c87bf0186563
SHA512eae9e960f65813e0725354993cb106a5c227ee12c160a7a7cb09ab31a56ff270e33298ebcf4380735eac8a38223c6855dbce644700a9a4e95d8e8f5291d6b084