Analysis

  • max time kernel
    145s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/10/2023, 12:45

General

  • Target

    d0b59323453e3d2b18d4158edc9c1cc04d6ad1a089b5aa9162832903d640941d.exe

  • Size

    13.4MB

  • MD5

    9ee307320438415b74127782ca4cfd77

  • SHA1

    add6aa424a4f527312046279bea82bbc38d1321a

  • SHA256

    d0b59323453e3d2b18d4158edc9c1cc04d6ad1a089b5aa9162832903d640941d

  • SHA512

    f80cd9fb206b8759f963ab03955cb978b4f5c6da3c459c8e860945e35b8f0a8ce99b145538196723b5f0f47a58baf3103e03cb98193677cab33d34e4f12bee33

  • SSDEEP

    393216:a3hpJ60EoIs95b5E8lbhTHFGML1J5NJspyQIHKFg2/O66t:mV7R395b5lHFGAJq8v2et

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d0b59323453e3d2b18d4158edc9c1cc04d6ad1a089b5aa9162832903d640941d.exe
    "C:\Users\Admin\AppData\Local\Temp\d0b59323453e3d2b18d4158edc9c1cc04d6ad1a089b5aa9162832903d640941d.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:860

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\d0b59323453e3d2b18d4158edc9c1cc04d6ad1a089b5aa9162832903d640941d.exepack.tmp

          Filesize

          2KB

          MD5

          adbf27d40dfc1004edc3d709d61232d4

          SHA1

          c1e32503ce648bab7271c3e2bae24a50c59680fa

          SHA256

          cd64a4292c7c58ad7078674e8f63ee377f4d94152f35bc226b5c9c62b2fdaf27

          SHA512

          b4c8af868a8227bf3716e8afafee1f921c4c3d48cb59bb2305ab9cc8c273d17061f255a813f5c61a6a5d545df8d0b1568ccde013b0e8a6ab0a94cbe8d55ef6a3

        • C:\Users\Admin\AppData\Local\Temp\dcb257771b1ff4a2e701c696a3137ee2.ini

          Filesize

          1KB

          MD5

          317e97116c104e45b25bfebea9c4d2bf

          SHA1

          95554ddd657b01e5656fa66ab314f8ba7b0b8b2a

          SHA256

          b076b6a03b194488923eab97a197131bab5483ad072270a1702c4936f0e0d595

          SHA512

          c0886f51b7094b5909938978a2c5215a7f6330270ef022339d8b43a88e732ead32eaebbda0afd5f6424212219b91c05790409d8e3aaffc5ba571210fbae4dfc5

        • C:\Users\Admin\AppData\Local\Temp\dcb257771b1ff4a2e701c696a3137ee2A.ini

          Filesize

          1KB

          MD5

          446d57052a1b08779cc452c4cf8a1d75

          SHA1

          58d778e3bad9bf0ed57c88172ae8b6c58c6b4fe4

          SHA256

          042d1900f531d293a518b8e223f1244d5f032b3b12fad61ffef21aa8ed592dab

          SHA512

          f89f34e08caf355039cc7c3b38c870216af672bdccd242f5be3f0013a58fd355579ed3e7477e50e8de0d5c3d6447a1b9adee9aa5954fc387138cc1e8ad9454a3

        • memory/860-333-0x0000000000400000-0x0000000001ECA000-memory.dmp

          Filesize

          26.8MB

        • memory/860-335-0x0000000000400000-0x0000000001ECA000-memory.dmp

          Filesize

          26.8MB

        • memory/860-2-0x0000000000400000-0x0000000001ECA000-memory.dmp

          Filesize

          26.8MB

        • memory/860-1-0x0000000001F50000-0x0000000001F53000-memory.dmp

          Filesize

          12KB

        • memory/860-328-0x0000000000400000-0x0000000001ECA000-memory.dmp

          Filesize

          26.8MB

        • memory/860-329-0x0000000001F50000-0x0000000001F53000-memory.dmp

          Filesize

          12KB

        • memory/860-330-0x0000000050000000-0x0000000050109000-memory.dmp

          Filesize

          1.0MB

        • memory/860-331-0x0000000000400000-0x0000000001ECA000-memory.dmp

          Filesize

          26.8MB

        • memory/860-332-0x0000000000400000-0x0000000001ECA000-memory.dmp

          Filesize

          26.8MB

        • memory/860-0-0x0000000000400000-0x0000000001ECA000-memory.dmp

          Filesize

          26.8MB

        • memory/860-334-0x0000000000400000-0x0000000001ECA000-memory.dmp

          Filesize

          26.8MB

        • memory/860-5-0x0000000050000000-0x0000000050109000-memory.dmp

          Filesize

          1.0MB

        • memory/860-336-0x0000000000400000-0x0000000001ECA000-memory.dmp

          Filesize

          26.8MB

        • memory/860-337-0x0000000000400000-0x0000000001ECA000-memory.dmp

          Filesize

          26.8MB

        • memory/860-338-0x0000000000400000-0x0000000001ECA000-memory.dmp

          Filesize

          26.8MB

        • memory/860-339-0x0000000000400000-0x0000000001ECA000-memory.dmp

          Filesize

          26.8MB

        • memory/860-340-0x0000000000400000-0x0000000001ECA000-memory.dmp

          Filesize

          26.8MB

        • memory/860-341-0x0000000000400000-0x0000000001ECA000-memory.dmp

          Filesize

          26.8MB

        • memory/860-342-0x0000000000400000-0x0000000001ECA000-memory.dmp

          Filesize

          26.8MB

        • memory/860-343-0x0000000000400000-0x0000000001ECA000-memory.dmp

          Filesize

          26.8MB

        • memory/860-344-0x0000000000400000-0x0000000001ECA000-memory.dmp

          Filesize

          26.8MB