Overview

overview

7

Static

static

3

2a56acb78c...52.exe

windows7-x64

7

2a56acb78c...52.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    142s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22-09-2023 01:28

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2a56acb78cd1488b5141c7f17cfd5dc9335d04eb732360972d23e85545ec9752.exe

  • Size

    1024KB

  • MD5

    577773865dfe06a509f6139a3bf722ac

  • SHA1

    2a066c61b61378a2d596162fa207a5fa7c3fcc56

  • SHA256

    2a56acb78cd1488b5141c7f17cfd5dc9335d04eb732360972d23e85545ec9752

  • SHA512

    446e88b18b69fe55be174b945f043687372c6d8ccdff72db0f845057af0a9c9e921d8de9090ef81405ccaa1e9c451b636ad75eea154b217c8e2b331188171214

  • SSDEEP

    24576:IOt3KtFRl2h4i8xl3vTtyyL6/eOvhh/mZ:VEtFO4i0/Jl+e6hlmZ

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs
  • Drops file in System32 directory 3 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2a56acb78cd1488b5141c7f17cfd5dc9335d04eb732360972d23e85545ec9752.exe
    "C:\Users\Admin\AppData\Local\Temp\2a56acb78cd1488b5141c7f17cfd5dc9335d04eb732360972d23e85545ec9752.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in System32 directory
    • Suspicious use of SetWindowsHookEx
    PID:1152

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Windows\SysWOW64\ESPI.dll
    Filesize

    120KB

    MD5

    6ded751b628ddb2a1c0c05f18858437c

    SHA1

    d1c98eb12d23975332ce59e17e8e1e3f3ad498fd

    SHA256

    6733977939a17dafb2e100c898fd0948095b6b33e8362aebe57ef7ea87db58ab

    SHA512

    554facab0a0d4b75504b0e3f9f8eda4ed0808e5397a214f3bf0c282542dfc2024c449b03c1aa9c1700307ce72ca88c1414650ec865b6e353b5d70f53aab10710

    Download Submit

  • C:\Windows\SysWOW64\ESPI.dll
    Filesize

    120KB

    MD5

    6ded751b628ddb2a1c0c05f18858437c

    SHA1

    d1c98eb12d23975332ce59e17e8e1e3f3ad498fd

    SHA256

    6733977939a17dafb2e100c898fd0948095b6b33e8362aebe57ef7ea87db58ab

    SHA512

    554facab0a0d4b75504b0e3f9f8eda4ed0808e5397a214f3bf0c282542dfc2024c449b03c1aa9c1700307ce72ca88c1414650ec865b6e353b5d70f53aab10710

    Download Submit

  • C:\Windows\SysWOW64\ESPI11.dll
    Filesize

    120KB

    MD5

    6ded751b628ddb2a1c0c05f18858437c

    SHA1

    d1c98eb12d23975332ce59e17e8e1e3f3ad498fd

    SHA256

    6733977939a17dafb2e100c898fd0948095b6b33e8362aebe57ef7ea87db58ab

    SHA512

    554facab0a0d4b75504b0e3f9f8eda4ed0808e5397a214f3bf0c282542dfc2024c449b03c1aa9c1700307ce72ca88c1414650ec865b6e353b5d70f53aab10710

    Download Submit