Analysis
-
max time kernel
144s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
11/10/2023, 02:16
General
-
Target
137e49858c733d44f4712faf54cf774d8fd0f2dc625881495679bf512518b969.exe
-
Size
374KB
-
MD5
eaf9b8929f3be096067ccae39a7f134c
-
SHA1
fff98cc04ba750ec887dade5c407e4d9e0fb6b08
-
SHA256
137e49858c733d44f4712faf54cf774d8fd0f2dc625881495679bf512518b969
-
SHA512
384fc172daf512040e4f87f736991719b7ed04bb13022b1e0a5700dba63547fa9383007987b929ed5254d4a60327d349222636ec1e499bc8e031e661c632b034
-
SSDEEP
6144:+Nthv6WYDQyzc7uRf6b3dZCXU9DEjitD++iDL0Hr2Zsba91Vq/lg:ytUvsusb3sUV9tDYDL0Lssba/Vglg
Score
10/10
Malware Config
Extracted
Credentials
Protocol: ftp- Host:
107.151.247.207 - Port:
21 - Username:
sukuai - Password:
sukuai
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\137e49858c733d44f4712faf54cf774d8fd0f2dc625881495679bf512518b969.exe"C:\Users\Admin\AppData\Local\Temp\137e49858c733d44f4712faf54cf774d8fd0f2dc625881495679bf512518b969.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
300KB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB