Analysis

  • max time kernel
    142s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07-10-2023 10:26

General

  • Target

    0cbdd1ac102eba608439c7f4710819bceff1bed0f9bc98fd98547dda24920a82.exe

  • Size

    9.1MB

  • MD5

    cb499f3627b660d45fe26c0f6bea4750

  • SHA1

    6cc9710930b8780c6b268bb3e1a6a07d5851c855

  • SHA256

    0cbdd1ac102eba608439c7f4710819bceff1bed0f9bc98fd98547dda24920a82

  • SHA512

    ab5c0b4aaf92e8c0e94d1b4b43e72ba09c204eaeeaaf409799dc048599789f5c758e9f6ddec04155152bf316f015bfad74d23266d1c7cef73e07f41d9609d93a

  • SSDEEP

    196608:ZTKRH11KIF//Hjg29zfqSvChARCefbGZy2RkDHL+FhyFkGm8gwEPiV:VKRnDL92bGfbGzR2H8GmfwEaV

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0cbdd1ac102eba608439c7f4710819bceff1bed0f9bc98fd98547dda24920a82.exe
    "C:\Users\Admin\AppData\Local\Temp\0cbdd1ac102eba608439c7f4710819bceff1bed0f9bc98fd98547dda24920a82.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2632

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\0cbdd1ac102eba608439c7f4710819bceff1bed0f9bc98fd98547dda24920a82.exepack.tmp

    Filesize

    2KB

    MD5

    3d9e6f6848623bb65c387efed397da36

    SHA1

    fc96e5b77cc7752c2c4ad1d41619e11a9d73c272

    SHA256

    c9f4e5c9a2f20f90edaa84c9561437244530e792690a2cd83ebb2708ac72eb34

    SHA512

    3189a029d27489a4a7333f609afa57830d9335386577d4b9f5268b6c57a58a591d54aeb28e3d8f332a80a7193957fe8ba21ef9973a46a8a0c3e84426fe01c630

  • C:\Users\Admin\AppData\Local\Temp\6596ea1f4499a469165ba42d704521c1.ini

    Filesize

    1KB

    MD5

    89bed0ce69757971a468f11cec45c59d

    SHA1

    81547d35b91e452712523d9c439785d614687755

    SHA256

    d43c159f0332a2af56c28ab183d16eeaeec0633ff75e60244fad43ca9eec75d7

    SHA512

    dc6e534472d54fa3fc8c12da4bfb583464a776c6d801c214504f674efe0d46a7f3568502cac32f28f2355c8454dc1620d2092dc75365365271f6bd046c7b5b29

  • C:\Users\Admin\AppData\Local\Temp\6596ea1f4499a469165ba42d704521c1A.ini

    Filesize

    1KB

    MD5

    06bf69a9c13f07ef963e190a89788aee

    SHA1

    6bae90a6daf96d84d8caccb3bec39fc8e8870247

    SHA256

    0fa276fec9bb61fa66b5d4b4da4d828195fcfd63d2e7d3bcce2b4412b06918d5

    SHA512

    9894e09f067619b434202a3c0ad714e594904464eb37bd98d9aa454cd1dc0055138dfc2ad6dc7c0cea178c412d5388e336784313f784c1cb573467a4a4dee594

  • memory/2632-341-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/2632-343-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/2632-1-0x00000000022C0000-0x00000000022C3000-memory.dmp

    Filesize

    12KB

  • memory/2632-337-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/2632-338-0x00000000022C0000-0x00000000022C3000-memory.dmp

    Filesize

    12KB

  • memory/2632-339-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/2632-340-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/2632-0-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/2632-342-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/2632-2-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/2632-344-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/2632-345-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/2632-346-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/2632-347-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/2632-348-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/2632-349-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/2632-350-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/2632-351-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB