Analysis

  • max time kernel
    122s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    08-10-2023 11:05

General

  • Target

    84f3a0efcc5ca8e77f509cc995d387b13ad89f3875fd04aebfef9e93735bce08.exe

  • Size

    3.5MB

  • MD5

    1a9d2b7f0db7dc1ec6b52b1337ea2aef

  • SHA1

    00fc78588c36a7fc4e2ad6c31878beebb98cc51c

  • SHA256

    84f3a0efcc5ca8e77f509cc995d387b13ad89f3875fd04aebfef9e93735bce08

  • SHA512

    c6c813090707a9d843f50f53f40ad1b9be368812c52276bb7478caf4d206138e42770372c5088939f70ff1c9fc693417c5651a7a485d55eda70dcae94d42f994

  • SSDEEP

    98304:lqIbznz6SWStHhQPx3QfSopPnxOf4eISqCvQVGeWI9EuVmzcvTrj:lqaVnNfn5ALQVGeWIzVvD

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Suspicious behavior: LoadsDriver 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\84f3a0efcc5ca8e77f509cc995d387b13ad89f3875fd04aebfef9e93735bce08.exe
    "C:\Users\Admin\AppData\Local\Temp\84f3a0efcc5ca8e77f509cc995d387b13ad89f3875fd04aebfef9e93735bce08.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of SetWindowsHookEx
    PID:2596

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\Temp\DD94687.32.dll

    Filesize

    2.4MB

    MD5

    13f2e7749a11b795dd5db7b728406c75

    SHA1

    bdd392df6c7007ef5fe93fd0eeb7057f48ed8d13

    SHA256

    5b8b4ec5622aabed629e8e9eb2dff9368bb4a6465d00d8bbf1ecb195688782e4

    SHA512

    632766da9492b4678a258bd66de637e62da057199a80007626ae31d0734f0ab98f5c11ff43fc129d8ad6a01b9124377740a3fcfe9c641da7baf0616bc550ff29

  • memory/2596-4-0x0000000074320000-0x0000000074635000-memory.dmp

    Filesize

    3.1MB

  • memory/2596-8-0x0000000074320000-0x0000000074635000-memory.dmp

    Filesize

    3.1MB