Analysis

  • max time kernel
    141s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    21-09-2023 03:48

General

  • Target

    c1e123917f75011ed0282c07d312b2f9de186c40c76fabdb4e8ac6e8e1e96ee6.exe

  • Size

    11.1MB

  • MD5

    61893bdf6bb6ceda4199e3ea395387f7

  • SHA1

    3c1aab94253ffc2029f599c75501ac608143f132

  • SHA256

    c1e123917f75011ed0282c07d312b2f9de186c40c76fabdb4e8ac6e8e1e96ee6

  • SHA512

    ca25287347dc765f86bac6247bc69c2a45f81e8ac67a90abb83a32025e0b396a4ac733e9242eee34f266826b8a369daf5a1fd7aa6c1374adf01f0260b1269863

  • SSDEEP

    196608:iTLEh5ccuyg0l6wcxpOP+0w9fgFWGnQN37E/eliiZFWvHbccMX66keyI0sq1SjB:iTLEhDrNlfcjqwghnuLEW7f3TFj0sq1Q

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c1e123917f75011ed0282c07d312b2f9de186c40c76fabdb4e8ac6e8e1e96ee6.exe
    "C:\Users\Admin\AppData\Local\Temp\c1e123917f75011ed0282c07d312b2f9de186c40c76fabdb4e8ac6e8e1e96ee6.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2476

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\32d9d00bc438b4173cc83d3b7440eaf4.ini

    Filesize

    1KB

    MD5

    c7d60c89470ac8317de7c9ac19876e66

    SHA1

    3b3d0ab65eea30d84cab7cf28a1e860703989e64

    SHA256

    6a60b35608cd6047f3df0a0f43b973a39a0e757a05936e71927e54f5e633090a

    SHA512

    cd0fc8b1b27e2dbacaf0c951f389939b129c0a6bdddd26e2e8bed4c9f9fcd296c171da6dd16baca655adfb97df260f11c58076d0920dc351921d6a20bcc61226

  • C:\Users\Admin\AppData\Local\Temp\32d9d00bc438b4173cc83d3b7440eaf4A.ini

    Filesize

    1KB

    MD5

    c4d9f53e05122a527ac0d0af34f972f1

    SHA1

    8bb6729362e324e4bc3577a5b91c2e565c04a6a7

    SHA256

    5bda0a566b859b74f07844d4800d4e52ed19ac60ff2496752afeb604b8ff41ec

    SHA512

    8fd0bbc61f9a23b5330732a99295fa3952fbc00eba8fbec87b0c80557b31444a43c0ed24db5c514fcfa8cf9ab62b596341f71ca79e8a7ccd184ce89a34922f4f

  • C:\Users\Admin\AppData\Local\Temp\c1e123917f75011ed0282c07d312b2f9de186c40c76fabdb4e8ac6e8e1e96ee6.exepack.tmp

    Filesize

    2KB

    MD5

    5b1daadcaf919b3fe0b9817c2bdc8c9d

    SHA1

    cc1c125158e968e1ebb8a013934b69886379a0ac

    SHA256

    2253bdc6c68bd28d3cfb80ca7c8934e35c4327fe2b38016538c38e354fd7d7be

    SHA512

    13a0421e61678fe906e2fcb66618ddb619c744effae149c44ccb4b16c94d43b7c1c561280560f08bd5f7993794e5fddb37c7f5b86c1949c64cee6d81c2e1e87a

  • memory/2476-356-0x0000000000400000-0x0000000001D2E000-memory.dmp

    Filesize

    25.2MB

  • memory/2476-358-0x0000000000400000-0x0000000001D2E000-memory.dmp

    Filesize

    25.2MB

  • memory/2476-1-0x0000000000260000-0x0000000000263000-memory.dmp

    Filesize

    12KB

  • memory/2476-352-0x0000000000400000-0x0000000001D2E000-memory.dmp

    Filesize

    25.2MB

  • memory/2476-353-0x0000000000260000-0x0000000000263000-memory.dmp

    Filesize

    12KB

  • memory/2476-354-0x0000000000400000-0x0000000001D2E000-memory.dmp

    Filesize

    25.2MB

  • memory/2476-355-0x0000000000400000-0x0000000001D2E000-memory.dmp

    Filesize

    25.2MB

  • memory/2476-0-0x0000000000400000-0x0000000001D2E000-memory.dmp

    Filesize

    25.2MB

  • memory/2476-357-0x0000000000400000-0x0000000001D2E000-memory.dmp

    Filesize

    25.2MB

  • memory/2476-2-0x0000000000400000-0x0000000001D2E000-memory.dmp

    Filesize

    25.2MB

  • memory/2476-359-0x0000000000400000-0x0000000001D2E000-memory.dmp

    Filesize

    25.2MB

  • memory/2476-360-0x0000000000400000-0x0000000001D2E000-memory.dmp

    Filesize

    25.2MB

  • memory/2476-361-0x0000000000400000-0x0000000001D2E000-memory.dmp

    Filesize

    25.2MB

  • memory/2476-362-0x0000000000400000-0x0000000001D2E000-memory.dmp

    Filesize

    25.2MB

  • memory/2476-363-0x0000000000400000-0x0000000001D2E000-memory.dmp

    Filesize

    25.2MB

  • memory/2476-364-0x0000000000400000-0x0000000001D2E000-memory.dmp

    Filesize

    25.2MB

  • memory/2476-365-0x0000000000400000-0x0000000001D2E000-memory.dmp

    Filesize

    25.2MB

  • memory/2476-366-0x0000000000400000-0x0000000001D2E000-memory.dmp

    Filesize

    25.2MB

  • memory/2476-367-0x0000000000400000-0x0000000001D2E000-memory.dmp

    Filesize

    25.2MB