Analysis

  • max time kernel
    141s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    24-09-2023 00:36

General

  • Target

    e7746b789b576fc645a132855b2034c0de9d4ab865e3432b2abd0930a72bab3b.exe

  • Size

    12.7MB

  • MD5

    68274611d30937f056aeeecb7517b654

  • SHA1

    bae6425d9db2a9f7df0f91ba0adff9ebef4e6ae9

  • SHA256

    e7746b789b576fc645a132855b2034c0de9d4ab865e3432b2abd0930a72bab3b

  • SHA512

    7812412084e1d233dccc0a13310f9b01255e8709028128be14ef27529de8c47417ffd3c18e27a2a84f580d8270fe2b697a9a9ab09c751f6e8155a5bf8ce63715

  • SSDEEP

    393216:oQaFSY2wsmPj+TWbo980kS+Y0Fm0PBFIMJ:obAjwBj+A080F0XI+

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e7746b789b576fc645a132855b2034c0de9d4ab865e3432b2abd0930a72bab3b.exe
    "C:\Users\Admin\AppData\Local\Temp\e7746b789b576fc645a132855b2034c0de9d4ab865e3432b2abd0930a72bab3b.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1096

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\0901b542e0e60f509343819c88183007.ini

    Filesize

    1KB

    MD5

    d77fe9e973d9d7692dfef7ceb9a0d623

    SHA1

    488e19d09e53818683d71e350c8ea36e76ed397f

    SHA256

    8dee931539b437aa28da8706900d53fefb577df3e57aa920f30c5599ccd07ab2

    SHA512

    30c47246774d41731a923618fd5970e461d523be8a9289ac1f771f820ddca3575ad1e747656f535705ffca3bd956269cbe83198e600f9432d0d5d788adb42890

  • C:\Users\Admin\AppData\Local\Temp\0901b542e0e60f509343819c88183007A.ini

    Filesize

    1KB

    MD5

    2544ca0c82f1ed4df5f631e561d13596

    SHA1

    e2ee94825b0fa923426e9cd9dac5bcfabd88027d

    SHA256

    2d70cdbb9bd2cd653869d8767e7c8fe33c6102062c51b9bae4bf8140f3a44b41

    SHA512

    d174a2c2772fda1547a41c8fd258c79e2411e3a21267ea09bdccbe593b5539c0b136128c55b22befb9927bdcfb6ef3ae29c9287141ff41a6ce935c56d07b71ec

  • C:\Users\Admin\AppData\Local\Temp\e7746b789b576fc645a132855b2034c0de9d4ab865e3432b2abd0930a72bab3b.exepack.tmp

    Filesize

    2KB

    MD5

    62041c1efe4d766e0db7bf54e64455d2

    SHA1

    bd525801331ba8cfe358b0f0135d0fff56f97579

    SHA256

    88b80172624ece23db43dbdb9bbfbf49987703532bc01c2a9de764162691d30b

    SHA512

    589032d2ac1917bf90a2764c0d760d83cec91b228cd2d562e7286d932dee756c744ea6c25679910bf70e41b70eb0d36feaf38e87d1fd34bcbb635eea27154965

  • memory/1096-339-0x0000000000400000-0x0000000001EBE000-memory.dmp

    Filesize

    26.7MB

  • memory/1096-341-0x0000000000400000-0x0000000001EBE000-memory.dmp

    Filesize

    26.7MB

  • memory/1096-2-0x0000000000400000-0x0000000001EBE000-memory.dmp

    Filesize

    26.7MB

  • memory/1096-1-0x0000000000250000-0x0000000000253000-memory.dmp

    Filesize

    12KB

  • memory/1096-334-0x0000000000400000-0x0000000001EBE000-memory.dmp

    Filesize

    26.7MB

  • memory/1096-335-0x0000000000250000-0x0000000000253000-memory.dmp

    Filesize

    12KB

  • memory/1096-336-0x0000000050000000-0x0000000050109000-memory.dmp

    Filesize

    1.0MB

  • memory/1096-337-0x0000000000400000-0x0000000001EBE000-memory.dmp

    Filesize

    26.7MB

  • memory/1096-338-0x0000000000400000-0x0000000001EBE000-memory.dmp

    Filesize

    26.7MB

  • memory/1096-0-0x0000000000400000-0x0000000001EBE000-memory.dmp

    Filesize

    26.7MB

  • memory/1096-340-0x0000000000400000-0x0000000001EBE000-memory.dmp

    Filesize

    26.7MB

  • memory/1096-5-0x0000000050000000-0x0000000050109000-memory.dmp

    Filesize

    1.0MB

  • memory/1096-342-0x0000000000400000-0x0000000001EBE000-memory.dmp

    Filesize

    26.7MB

  • memory/1096-343-0x0000000000400000-0x0000000001EBE000-memory.dmp

    Filesize

    26.7MB

  • memory/1096-344-0x0000000000400000-0x0000000001EBE000-memory.dmp

    Filesize

    26.7MB

  • memory/1096-345-0x0000000000400000-0x0000000001EBE000-memory.dmp

    Filesize

    26.7MB

  • memory/1096-346-0x0000000000400000-0x0000000001EBE000-memory.dmp

    Filesize

    26.7MB

  • memory/1096-347-0x0000000000400000-0x0000000001EBE000-memory.dmp

    Filesize

    26.7MB

  • memory/1096-348-0x0000000000400000-0x0000000001EBE000-memory.dmp

    Filesize

    26.7MB

  • memory/1096-349-0x0000000000400000-0x0000000001EBE000-memory.dmp

    Filesize

    26.7MB

  • memory/1096-350-0x0000000000400000-0x0000000001EBE000-memory.dmp

    Filesize

    26.7MB