Analysis

  • max time kernel
    141s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24/09/2023, 01:53

General

  • Target

    1fd97a147196b2d2223674edbb081a349963546c3abcec0e2734f5dc457a7bf6.exe

  • Size

    11.6MB

  • MD5

    f69ec44803ff84bcbf8e6f5a379f936d

  • SHA1

    a8bedf714682de2195f3ada7bb7472160562ff39

  • SHA256

    1fd97a147196b2d2223674edbb081a349963546c3abcec0e2734f5dc457a7bf6

  • SHA512

    e1a568164a0196eda25a105e719fbcf1f24e7c036f3d56babe07b620544f595fb2c83f7a65f0ed517d46b51bfe1aab2b6d2fa3a14ba1cc4bfea2ebbfe42e9baf

  • SSDEEP

    196608:RBpcxnfBgc6M/Baj98EHPlY6BG7jkf/8YzPnsCbvfnL3vQRqCiwzOB4yngWouX1l:dcxnff6ES9tbmjkf/BsMvfnDvQNiwziz

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1fd97a147196b2d2223674edbb081a349963546c3abcec0e2734f5dc457a7bf6.exe
    "C:\Users\Admin\AppData\Local\Temp\1fd97a147196b2d2223674edbb081a349963546c3abcec0e2734f5dc457a7bf6.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3928

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\1fd97a147196b2d2223674edbb081a349963546c3abcec0e2734f5dc457a7bf6.exepack.tmp

          Filesize

          2KB

          MD5

          1f0d5e93cd8e331bd4a759f679176db6

          SHA1

          34e6e35cf6661a9e20f36dec5972a580dd21198d

          SHA256

          233759658c67d14bf64d5baa73c6bbd3eaf557e635aade11171ca4e92e6c4ac4

          SHA512

          12c25da040be1f7018f63136e6e650f40a226fd6a21040ee495c7b8aa0983cf57b2d28e4fe990f3783bf9b5bc30041ab199b148f507566fb1b527fd6014a40db

        • C:\Users\Admin\AppData\Local\Temp\8cda6c2d1dfad7e88c67e7b3af2fc1c5.ini

          Filesize

          1KB

          MD5

          b90cc4b7b500d7cdd2383ae8e8faf0e7

          SHA1

          028b576b253d6e3216a25f5cb075d1a54118c637

          SHA256

          1c97315bd277a44bb2d740289763c201b262000f0bc83ab6c44c4d0655c9cec2

          SHA512

          529e8ce14c2259a92633fdba8e928dc679197a0d8409051e9deb00496cc11ae5f83cecf30ff300d128c429a02ea4e6ac0f140e4f6609c72aa44566fd2d996fe8

        • C:\Users\Admin\AppData\Local\Temp\8cda6c2d1dfad7e88c67e7b3af2fc1c5A.ini

          Filesize

          1KB

          MD5

          a5a3c4c99a2fbb8ee42ddde01204997a

          SHA1

          bed860edef47e8577c94f3adf653039ac2b09471

          SHA256

          95ac8952e6fd8ca56e4844c7a4d52279d2184b11e5b9b4e77dae29a99c62b66f

          SHA512

          406d3ac97db66f0b4e6905c321c40baccac6c27d3638638ef4528212403933789b9f9ba8d05c7320061a0893ad7b01d4e9eb7d4136408bda712ff73e6bac8bed

        • memory/3928-333-0x0000000000400000-0x0000000001D14000-memory.dmp

          Filesize

          25.1MB

        • memory/3928-335-0x0000000000400000-0x0000000001D14000-memory.dmp

          Filesize

          25.1MB

        • memory/3928-4-0x0000000077890000-0x0000000077980000-memory.dmp

          Filesize

          960KB

        • memory/3928-2-0x0000000000400000-0x0000000001D14000-memory.dmp

          Filesize

          25.1MB

        • memory/3928-1-0x00000000022F0000-0x00000000022F3000-memory.dmp

          Filesize

          12KB

        • memory/3928-329-0x0000000000400000-0x0000000001D14000-memory.dmp

          Filesize

          25.1MB

        • memory/3928-330-0x00000000022F0000-0x00000000022F3000-memory.dmp

          Filesize

          12KB

        • memory/3928-331-0x0000000077890000-0x0000000077980000-memory.dmp

          Filesize

          960KB

        • memory/3928-332-0x0000000076D50000-0x0000000076F65000-memory.dmp

          Filesize

          2.1MB

        • memory/3928-0-0x0000000000400000-0x0000000001D14000-memory.dmp

          Filesize

          25.1MB

        • memory/3928-334-0x0000000000400000-0x0000000001D14000-memory.dmp

          Filesize

          25.1MB

        • memory/3928-5-0x0000000076D50000-0x0000000076F65000-memory.dmp

          Filesize

          2.1MB

        • memory/3928-336-0x0000000000400000-0x0000000001D14000-memory.dmp

          Filesize

          25.1MB

        • memory/3928-337-0x0000000000400000-0x0000000001D14000-memory.dmp

          Filesize

          25.1MB

        • memory/3928-338-0x0000000000400000-0x0000000001D14000-memory.dmp

          Filesize

          25.1MB

        • memory/3928-339-0x0000000000400000-0x0000000001D14000-memory.dmp

          Filesize

          25.1MB

        • memory/3928-340-0x0000000000400000-0x0000000001D14000-memory.dmp

          Filesize

          25.1MB

        • memory/3928-341-0x0000000000400000-0x0000000001D14000-memory.dmp

          Filesize

          25.1MB

        • memory/3928-342-0x0000000000400000-0x0000000001D14000-memory.dmp

          Filesize

          25.1MB

        • memory/3928-343-0x0000000000400000-0x0000000001D14000-memory.dmp

          Filesize

          25.1MB

        • memory/3928-344-0x0000000000400000-0x0000000001D14000-memory.dmp

          Filesize

          25.1MB

        • memory/3928-345-0x0000000000400000-0x0000000001D14000-memory.dmp

          Filesize

          25.1MB