Analysis

  • max time kernel
    141s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    07-10-2023 11:02

General

  • Target

    9ace794f808f69e2d1b48e83317a205ae65d9e9e6056a3cd263a4a8969057e5d.exe

  • Size

    8.0MB

  • MD5

    f17113c1c26fe6d449a5d63f819129dd

  • SHA1

    6b63f523d171f38220d44972c149ad5eb6568636

  • SHA256

    9ace794f808f69e2d1b48e83317a205ae65d9e9e6056a3cd263a4a8969057e5d

  • SHA512

    55e57c5671ace947b04d69552dcd3b4e4bdb021aed21c7888b106b11c1dafab36150887dc951064fdca486a20ce74a7bc421ce7df6d5b825959cf7a2df24b132

  • SSDEEP

    196608:ZTKRH11KIF//Hjg29zfqSl5dLcBoehuEFga9hE+E0nlE2e3WJ:VKRnDL92XouVs+E0nW3WJ

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9ace794f808f69e2d1b48e83317a205ae65d9e9e6056a3cd263a4a8969057e5d.exe
    "C:\Users\Admin\AppData\Local\Temp\9ace794f808f69e2d1b48e83317a205ae65d9e9e6056a3cd263a4a8969057e5d.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2244

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\526bdbc8e7cb88e1221883b7221dce6a.ini

    Filesize

    1KB

    MD5

    03218fb723ae9fd8d13058c6a3be07e3

    SHA1

    bd9d1268c544a8a793070dd0ab1a03abbcc94c0e

    SHA256

    0448d76802804e1746a977a23cf829f03f299356a95db48146d9f3bee1f159f6

    SHA512

    cada899c8f5f65a9fd0c1e62fb6f295f693ada2bf1c87df97d862ae14e6ef740a8b4249e8291caff5722ba93e272309cdc13d48eeaa9353016996c5e11b6d7b0

  • C:\Users\Admin\AppData\Local\Temp\526bdbc8e7cb88e1221883b7221dce6aA.ini

    Filesize

    1KB

    MD5

    406d54401db50d90d5047110c804d630

    SHA1

    ebe13c5da9d75f04abcdc3bf5a63adb1342cb3b7

    SHA256

    0ed6aecb6dc649fb4ac346a76d6e66bae2f873aa6694efeb636f988ccf257fbc

    SHA512

    f5883df22217d2d7f4b2d97d343f1ffbd86dae059e8813c6336e8c0a09e5cc37bb5a294c8dc8e871ca78de2d5cda736af34d347bdb1f5309bd08e75b2429e497

  • C:\Users\Admin\AppData\Local\Temp\9ace794f808f69e2d1b48e83317a205ae65d9e9e6056a3cd263a4a8969057e5d.exepack.tmp

    Filesize

    2KB

    MD5

    ec3a267e56205bdfe480751beedeac74

    SHA1

    0ada13f93f995d7b811d434ec895a69a37bb2a85

    SHA256

    8d77c6a66e6159405d3243d4fb3d4cf354fd7be25213fbaa4a82afe17c987836

    SHA512

    9303858685dccad35611b7640c5939b73fa0017888308dc726ab0d29f9a61da0c618d8682416b6b918308b26a180440f981017cbfe0b887a65d6f631efd19d62

  • memory/2244-356-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/2244-358-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/2244-0-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/2244-352-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/2244-353-0x0000000000250000-0x0000000000253000-memory.dmp

    Filesize

    12KB

  • memory/2244-354-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/2244-355-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/2244-1-0x0000000000250000-0x0000000000253000-memory.dmp

    Filesize

    12KB

  • memory/2244-357-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/2244-2-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/2244-359-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/2244-360-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/2244-361-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/2244-362-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/2244-363-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/2244-364-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/2244-365-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/2244-366-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/2244-367-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB