Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    30-09-2023 16:34

General

  • Target

    2dd3b7d8b30b4fd2c48e8109f18d4ecd1c8ded71c9ba7d1fef53b7ae750e5493.exe

  • Size

    3.6MB

  • MD5

    d12dd08c1893b33eac27302441c017ea

  • SHA1

    df239050ecfdde23837b81e92ccb39468f70077f

  • SHA256

    2dd3b7d8b30b4fd2c48e8109f18d4ecd1c8ded71c9ba7d1fef53b7ae750e5493

  • SHA512

    d66990caaf975e3671f59465d85f44f0ac8c93ea94ae25cabbec46b91926bf3fd9e4bace490c3268daea9690899f0435a51451a8e3daea23033fc9031451fea4

  • SSDEEP

    98304:BGpt2YL/5kFu3HWoc+u6CirjnXdIyAkLC0nMPsgC:NekwdeyLXdIyzdM

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2dd3b7d8b30b4fd2c48e8109f18d4ecd1c8ded71c9ba7d1fef53b7ae750e5493.exe
    "C:\Users\Admin\AppData\Local\Temp\2dd3b7d8b30b4fd2c48e8109f18d4ecd1c8ded71c9ba7d1fef53b7ae750e5493.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of SetWindowsHookEx
    PID:2792

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\ClinkApi.dll

    Filesize

    576KB

    MD5

    7bc18b5d04bbaa53af22bb288c5a810c

    SHA1

    6e3ba5d7c21a38076bcad960f51c8849928a0c9a

    SHA256

    ce7c04f57eae835917279c44c64c790370d26a69311d8ca501d8ddd6670649b4

    SHA512

    d6bca1619cc028a74e68d8188986e5d13749fd336c2ce9498dba8937142369ce6ca61d1d8df8e283b8f2f1b5e125a227a3a720950c7d3b585c24e5871cb99963

  • memory/2792-0-0x0000000000400000-0x00000000007C5000-memory.dmp

    Filesize

    3.8MB

  • memory/2792-1-0x0000000000400000-0x00000000007C5000-memory.dmp

    Filesize

    3.8MB

  • memory/2792-7-0x0000000003BF0000-0x0000000003F46000-memory.dmp

    Filesize

    3.3MB

  • memory/2792-8-0x0000000003BF0000-0x0000000003F46000-memory.dmp

    Filesize

    3.3MB

  • memory/2792-9-0x0000000003BF0000-0x0000000003F46000-memory.dmp

    Filesize

    3.3MB

  • memory/2792-10-0x0000000003BF0000-0x0000000003F46000-memory.dmp

    Filesize

    3.3MB

  • memory/2792-11-0x0000000000400000-0x00000000007C5000-memory.dmp

    Filesize

    3.8MB

  • memory/2792-12-0x0000000003BF0000-0x0000000003F46000-memory.dmp

    Filesize

    3.3MB