Overview

overview

7

Static

static

3

22314c3c4f...ac.exe

windows7-x64

7

22314c3c4f...ac.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    118s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    04/09/2023, 04:38

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    22314c3c4f7f8085701c788086fcb07440815ac396374a16b9fb415e166119ac.exe

  • Size

    2.3MB

  • MD5

    ee00b3e0245786dce6e03f3df6b5384e

  • SHA1

    fdace461c0d1108550b1d7612b49ccfb62aab7e9

  • SHA256

    22314c3c4f7f8085701c788086fcb07440815ac396374a16b9fb415e166119ac

  • SHA512

    f89485d8e17393725823bffe8a0a1ec0bfce79dc123c02e68db456abd17808386ba4a5fec1801e6ab9cad4a0d08e05939e739dab0e99b51272423f3921538a47

  • SSDEEP

    24576:yGEsFyJ/Fi5kj+yBqlK8xIfdgImuCGN8u/R9YF+j7/Cn6RvHiwuKgVLbsGZqbt1y:yEPl1f+HtEUtRHlhm23aI3Aok

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Suspicious behavior: RenamesItself 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\22314c3c4f7f8085701c788086fcb07440815ac396374a16b9fb415e166119ac.exe
    "C:\Users\Admin\AppData\Local\Temp\22314c3c4f7f8085701c788086fcb07440815ac396374a16b9fb415e166119ac.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: RenamesItself
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2176
    • C:\Users\Admin\AppData\Local\Temp\22314c3c4f7f8085701c788086fcb07440815ac396374a16b9fb415e166119ac.exe
      C:\Users\Admin\AppData\Local\Temp\22314c3c4f7f8085701c788086fcb07440815ac396374a16b9fb415e166119ac.exe --
      2⤵
      • Executes dropped EXE
      • Suspicious use of SetWindowsHookEx
      PID:2172

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\22314c3c4f7f8085701c788086fcb07440815ac396374a16b9fb415e166119ac.exe
    Filesize

    2.3MB

    MD5

    20604b1944fb12ae09b3c057a0b387c6

    SHA1

    96ac51990c9d8345e49baf08d81aa3a331e6b20c

    SHA256

    97c89189c125b54f98ea688ae0eb92e0b546ddebb57b3ff602c908351fdb7716

    SHA512

    5f931148ac89c4015350fc87cd78e9f560cd9b47c15c6bd418d3d1df1be70a81f5ef3a9d21abd4979f23c9d90dbf96021c4f06a2e066564aa716239f2e518d37

    Download Submit

  • \Users\Admin\AppData\Local\Temp\22314c3c4f7f8085701c788086fcb07440815ac396374a16b9fb415e166119ac.exe
    Filesize

    2.3MB

    MD5

    20604b1944fb12ae09b3c057a0b387c6

    SHA1

    96ac51990c9d8345e49baf08d81aa3a331e6b20c

    SHA256

    97c89189c125b54f98ea688ae0eb92e0b546ddebb57b3ff602c908351fdb7716

    SHA512

    5f931148ac89c4015350fc87cd78e9f560cd9b47c15c6bd418d3d1df1be70a81f5ef3a9d21abd4979f23c9d90dbf96021c4f06a2e066564aa716239f2e518d37

    Download Submit

  • memory/2176-6-0x0000000000400000-0x0000000000684000-memory.dmp

    Filesize

    2.5MB

    Download