Analysis

  • max time kernel
    142s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    24-09-2023 01:53

General

  • Target

    1fd97a147196b2d2223674edbb081a349963546c3abcec0e2734f5dc457a7bf6.exe

  • Size

    11.6MB

  • MD5

    f69ec44803ff84bcbf8e6f5a379f936d

  • SHA1

    a8bedf714682de2195f3ada7bb7472160562ff39

  • SHA256

    1fd97a147196b2d2223674edbb081a349963546c3abcec0e2734f5dc457a7bf6

  • SHA512

    e1a568164a0196eda25a105e719fbcf1f24e7c036f3d56babe07b620544f595fb2c83f7a65f0ed517d46b51bfe1aab2b6d2fa3a14ba1cc4bfea2ebbfe42e9baf

  • SSDEEP

    196608:RBpcxnfBgc6M/Baj98EHPlY6BG7jkf/8YzPnsCbvfnL3vQRqCiwzOB4yngWouX1l:dcxnff6ES9tbmjkf/BsMvfnDvQNiwziz

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1fd97a147196b2d2223674edbb081a349963546c3abcec0e2734f5dc457a7bf6.exe
    "C:\Users\Admin\AppData\Local\Temp\1fd97a147196b2d2223674edbb081a349963546c3abcec0e2734f5dc457a7bf6.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3000

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\1fd97a147196b2d2223674edbb081a349963546c3abcec0e2734f5dc457a7bf6.exepack.tmp

    Filesize

    2KB

    MD5

    1f0d5e93cd8e331bd4a759f679176db6

    SHA1

    34e6e35cf6661a9e20f36dec5972a580dd21198d

    SHA256

    233759658c67d14bf64d5baa73c6bbd3eaf557e635aade11171ca4e92e6c4ac4

    SHA512

    12c25da040be1f7018f63136e6e650f40a226fd6a21040ee495c7b8aa0983cf57b2d28e4fe990f3783bf9b5bc30041ab199b148f507566fb1b527fd6014a40db

  • C:\Users\Admin\AppData\Local\Temp\8cda6c2d1dfad7e88c67e7b3af2fc1c5.ini

    Filesize

    1KB

    MD5

    b90cc4b7b500d7cdd2383ae8e8faf0e7

    SHA1

    028b576b253d6e3216a25f5cb075d1a54118c637

    SHA256

    1c97315bd277a44bb2d740289763c201b262000f0bc83ab6c44c4d0655c9cec2

    SHA512

    529e8ce14c2259a92633fdba8e928dc679197a0d8409051e9deb00496cc11ae5f83cecf30ff300d128c429a02ea4e6ac0f140e4f6609c72aa44566fd2d996fe8

  • C:\Users\Admin\AppData\Local\Temp\8cda6c2d1dfad7e88c67e7b3af2fc1c5A.ini

    Filesize

    1KB

    MD5

    a5a3c4c99a2fbb8ee42ddde01204997a

    SHA1

    bed860edef47e8577c94f3adf653039ac2b09471

    SHA256

    95ac8952e6fd8ca56e4844c7a4d52279d2184b11e5b9b4e77dae29a99c62b66f

    SHA512

    406d3ac97db66f0b4e6905c321c40baccac6c27d3638638ef4528212403933789b9f9ba8d05c7320061a0893ad7b01d4e9eb7d4136408bda712ff73e6bac8bed

  • memory/3000-331-0x0000000000400000-0x0000000001D14000-memory.dmp

    Filesize

    25.1MB

  • memory/3000-333-0x0000000000400000-0x0000000001D14000-memory.dmp

    Filesize

    25.1MB

  • memory/3000-2-0x0000000000400000-0x0000000001D14000-memory.dmp

    Filesize

    25.1MB

  • memory/3000-1-0x00000000003F0000-0x00000000003F3000-memory.dmp

    Filesize

    12KB

  • memory/3000-328-0x00000000003F0000-0x00000000003F3000-memory.dmp

    Filesize

    12KB

  • memory/3000-329-0x0000000000400000-0x0000000001D14000-memory.dmp

    Filesize

    25.1MB

  • memory/3000-330-0x0000000000400000-0x0000000001D14000-memory.dmp

    Filesize

    25.1MB

  • memory/3000-0-0x0000000000400000-0x0000000001D14000-memory.dmp

    Filesize

    25.1MB

  • memory/3000-332-0x0000000000400000-0x0000000001D14000-memory.dmp

    Filesize

    25.1MB

  • memory/3000-4-0x0000000075560000-0x0000000075670000-memory.dmp

    Filesize

    1.1MB

  • memory/3000-334-0x0000000000400000-0x0000000001D14000-memory.dmp

    Filesize

    25.1MB

  • memory/3000-335-0x0000000000400000-0x0000000001D14000-memory.dmp

    Filesize

    25.1MB

  • memory/3000-336-0x0000000000400000-0x0000000001D14000-memory.dmp

    Filesize

    25.1MB

  • memory/3000-337-0x0000000000400000-0x0000000001D14000-memory.dmp

    Filesize

    25.1MB

  • memory/3000-338-0x0000000000400000-0x0000000001D14000-memory.dmp

    Filesize

    25.1MB

  • memory/3000-339-0x0000000000400000-0x0000000001D14000-memory.dmp

    Filesize

    25.1MB

  • memory/3000-340-0x0000000000400000-0x0000000001D14000-memory.dmp

    Filesize

    25.1MB

  • memory/3000-341-0x0000000000400000-0x0000000001D14000-memory.dmp

    Filesize

    25.1MB

  • memory/3000-342-0x0000000000400000-0x0000000001D14000-memory.dmp

    Filesize

    25.1MB

  • memory/3000-343-0x0000000000400000-0x0000000001D14000-memory.dmp

    Filesize

    25.1MB