Overview

overview

7

Static

static

3

ecfe6598f6...76.exe

windows7-x64

7

ecfe6598f6...76.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    24-09-2023 00:25

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ecfe6598f6d17fbcaacc514910e1586713fd50c722d098e81ba00ae5ebe18676.exe

  • Size

    3.1MB

  • MD5

    46b5a4ac918975fdc45301e4446962bf

  • SHA1

    e02d83e3ec959e7fbaba654f774d6015666f3945

  • SHA256

    ecfe6598f6d17fbcaacc514910e1586713fd50c722d098e81ba00ae5ebe18676

  • SHA512

    fb3a167aa3bee59f81c3938bc86d4a914c1e919fd29bf7d1cd0991c9aa6c5a5a39d463cddd987c3ccb8d7914a121e9599164d48448eef8fcce70aab5f5d14e46

  • SSDEEP

    49152:LWXuIPsjek9BHtTu4xBb/5IPvC8TmP9Vv5TJ51QNi51n:ieIPsSk9TTu4fmUn5TJ5yNivn

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ecfe6598f6d17fbcaacc514910e1586713fd50c722d098e81ba00ae5ebe18676.exe
    "C:\Users\Admin\AppData\Local\Temp\ecfe6598f6d17fbcaacc514910e1586713fd50c722d098e81ba00ae5ebe18676.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of SetWindowsHookEx
    PID:2220

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\ExuiKrnln_Win32_20230911.lib
    Filesize

    1.6MB

    MD5

    031ad1ecd93701d39265771942ec716c

    SHA1

    cb3ef507bf0e848894fbb96a29bfc94a0c302152

    SHA256

    9a7fde2ea7883701bf858e0daef74d787a31c3cbd9f1171cec0a3a382ee9e6ba

    SHA512

    374dab32b6304834c7acd8b5e6701ece016bf57d3abdd416ef2b63f7cbda24c9e59f9dfc27b6823ac6256bbab38aace74334dec7d57f1ef6cb9b80c239003bae

    Download Submit