Analysis

  • max time kernel
    141s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    01/09/2023, 20:28

General

  • Target

    82cdbd68919f5365e3b6b04f57abd4ea46112ebb68bd91c8ecf70265ed142299.exe

  • Size

    14.0MB

  • MD5

    bae6eea602dfc23247939aba30cf0248

  • SHA1

    0d2cd0852848161eaa62c041659dd66479946bf0

  • SHA256

    82cdbd68919f5365e3b6b04f57abd4ea46112ebb68bd91c8ecf70265ed142299

  • SHA512

    439efcf7f0748409fbe69fe4adb5c340bb2b7add2e957d3886b4fd335532fb41e9c370c5e9935140400aa25ad83e08bc4029ce654c565251a42e051267363b1c

  • SSDEEP

    393216:clopZST8RPU6hUZUket1jx44bZbuiiNTp0Fo7l:OoopaUZUkEl24puiiQFoJ

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\82cdbd68919f5365e3b6b04f57abd4ea46112ebb68bd91c8ecf70265ed142299.exe
    "C:\Users\Admin\AppData\Local\Temp\82cdbd68919f5365e3b6b04f57abd4ea46112ebb68bd91c8ecf70265ed142299.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2840

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\5bfdb46aa69f033b33cfd7f6b1ca9edc.ini

          Filesize

          1KB

          MD5

          2ff1ac990bb6d59018120edbb1db62e6

          SHA1

          578a07568a3d4a586500d8cf89ef3397f5fafffa

          SHA256

          deb653d1573b986b82d30eafd27c8f9e779c166eed32ff5ad4823d901640e4d2

          SHA512

          018e8c3067796c25f8c74889eaf980609a479cc5f1b7af21fa5c1206081995c46d453a27ae4459246e56de38ae75657d8d4f52b6683caf45db959c4db8e60246

        • C:\Users\Admin\AppData\Local\Temp\5bfdb46aa69f033b33cfd7f6b1ca9edcA.ini

          Filesize

          1KB

          MD5

          e87efe429c4643cfc53f28282bf4d199

          SHA1

          fd2b588ba6a4c8c9ce2059a52a2ba1b35050a98c

          SHA256

          c2d2f449bea160e9322df9c60edf7653c9f2cead9e4f395d90b472aab25b3858

          SHA512

          a1415a05e52b52f774d9c82bfaec66298c162b6f1e14656601b2ae6da0608b9c420929a981d3f573dcc3926b9a4b5a34be8a8f47c62ee929c7ef1380c1d0459d

        • C:\Users\Admin\AppData\Local\Temp\82cdbd68919f5365e3b6b04f57abd4ea46112ebb68bd91c8ecf70265ed142299.exepack.tmp

          Filesize

          2KB

          MD5

          1950503b71bbeccf151fd7b8e7888527

          SHA1

          c9415c0f74bee4162656c36e5d9e489728f7b5b1

          SHA256

          b21e232dc2d56d03a34fc78f76e449d702aaa5c6059e01146cf573a5ab425517

          SHA512

          fab95bfc11b468c3643e90a1d48858ab89b3795668dcae437249d7fe963cbf137e67e28757c75158d80ad40fc8b4179ff8270e20591a7594720e09f596284141

        • memory/2840-333-0x0000000000400000-0x0000000001DF8000-memory.dmp

          Filesize

          26.0MB

        • memory/2840-335-0x0000000000400000-0x0000000001DF8000-memory.dmp

          Filesize

          26.0MB

        • memory/2840-2-0x0000000000400000-0x0000000001DF8000-memory.dmp

          Filesize

          26.0MB

        • memory/2840-1-0x00000000003D0000-0x00000000003D3000-memory.dmp

          Filesize

          12KB

        • memory/2840-330-0x0000000000400000-0x0000000001DF8000-memory.dmp

          Filesize

          26.0MB

        • memory/2840-331-0x00000000003D0000-0x00000000003D3000-memory.dmp

          Filesize

          12KB

        • memory/2840-332-0x0000000050000000-0x0000000050109000-memory.dmp

          Filesize

          1.0MB

        • memory/2840-0-0x0000000000400000-0x0000000001DF8000-memory.dmp

          Filesize

          26.0MB

        • memory/2840-334-0x0000000000400000-0x0000000001DF8000-memory.dmp

          Filesize

          26.0MB

        • memory/2840-5-0x0000000050000000-0x0000000050109000-memory.dmp

          Filesize

          1.0MB

        • memory/2840-336-0x0000000000400000-0x0000000001DF8000-memory.dmp

          Filesize

          26.0MB

        • memory/2840-337-0x0000000000400000-0x0000000001DF8000-memory.dmp

          Filesize

          26.0MB

        • memory/2840-338-0x0000000000400000-0x0000000001DF8000-memory.dmp

          Filesize

          26.0MB

        • memory/2840-339-0x0000000000400000-0x0000000001DF8000-memory.dmp

          Filesize

          26.0MB

        • memory/2840-340-0x0000000000400000-0x0000000001DF8000-memory.dmp

          Filesize

          26.0MB

        • memory/2840-341-0x0000000000400000-0x0000000001DF8000-memory.dmp

          Filesize

          26.0MB

        • memory/2840-342-0x0000000000400000-0x0000000001DF8000-memory.dmp

          Filesize

          26.0MB

        • memory/2840-343-0x0000000000400000-0x0000000001DF8000-memory.dmp

          Filesize

          26.0MB

        • memory/2840-344-0x0000000000400000-0x0000000001DF8000-memory.dmp

          Filesize

          26.0MB

        • memory/2840-345-0x0000000000400000-0x0000000001DF8000-memory.dmp

          Filesize

          26.0MB