Analysis

  • max time kernel
    142s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    11-10-2023 15:39

General

  • Target

    29b46b7d567a56df1067fba940b20e918595635131af15d8acf917ca1e2cf122.exe

  • Size

    15.8MB

  • MD5

    a97d1f9c6ce0296b57fbb1ec28b06d4a

  • SHA1

    98442fe1cbe1cc533dc9ac18ec9e04dbf319f762

  • SHA256

    29b46b7d567a56df1067fba940b20e918595635131af15d8acf917ca1e2cf122

  • SHA512

    ab5a449a512a9da4a141f0a8b24ea4c7030af50067a34e98135436f684071edaf0b0531b3be6db1344c5ceb05ea7e7842dcffda9c74af63d210856d57d0c448e

  • SSDEEP

    393216:dcxnff6ES9thlgzWCwThyBdMp5n0J8ZH6YqHzhOEh9BZTq2Bh/l:AfSEUlgElyXaAHBh9bTl

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\29b46b7d567a56df1067fba940b20e918595635131af15d8acf917ca1e2cf122.exe
    "C:\Users\Admin\AppData\Local\Temp\29b46b7d567a56df1067fba940b20e918595635131af15d8acf917ca1e2cf122.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2388

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\29b46b7d567a56df1067fba940b20e918595635131af15d8acf917ca1e2cf122.exepack.tmp

    Filesize

    2KB

    MD5

    67973a691ad5607955fef38c31309583

    SHA1

    653cfd523a36f8e61b13ba163427c0f4f6c60339

    SHA256

    6e78a0328a8389d3fe31b408553f3909a357de320ef77facb071686840d0c8a5

    SHA512

    5e05cecf526a1491c277c085f07b7baf0fb3de0c244f68d6a222ae2469eac5f39794571c90b133c88c216ca764bce6787998d7fe652072ea3ca3ddbb69643578

  • C:\Users\Admin\AppData\Local\Temp\3d82bf166995b8cb7eb2307f68af3ad2.ini

    Filesize

    1KB

    MD5

    804517aaf434859ba37a498bd0b3f0ca

    SHA1

    e729f5c395a1a356ad2d81c2cfe6c0d8003bcb08

    SHA256

    c75d492c093e87f18f5717c588bd78bd122f4e45e742de41dea1282b40fa9fe7

    SHA512

    522fa2e3f587343e5a4672c361191523563cffcf253e330dd1eff62a6bc7cbad07bf871d9e1900c3adc590f318ceb802961c4acd9ea4ba3c428ef6359dd92f56

  • C:\Users\Admin\AppData\Local\Temp\3d82bf166995b8cb7eb2307f68af3ad2A.ini

    Filesize

    1KB

    MD5

    704b33d07e6908b0dc01f80ab687bb94

    SHA1

    87edd59a0a16860ee869a8445a0957b953f8c08a

    SHA256

    fcbf7e050489e5bc277ab8bd476280275eedd93d2e2e47200d445c16197fac9c

    SHA512

    c738382e5f3f630dfbe27c6e9ba2938c9b79d52c57f1420a677c027c6f8c8a86e86154bc676258ff8d81596defd026d7578c145c0840bd887eabc14109138eb9

  • memory/2388-355-0x0000000000400000-0x0000000001D14000-memory.dmp

    Filesize

    25.1MB

  • memory/2388-357-0x0000000000400000-0x0000000001D14000-memory.dmp

    Filesize

    25.1MB

  • memory/2388-2-0x0000000000400000-0x0000000001D14000-memory.dmp

    Filesize

    25.1MB

  • memory/2388-1-0x0000000000260000-0x0000000000263000-memory.dmp

    Filesize

    12KB

  • memory/2388-352-0x0000000000400000-0x0000000001D14000-memory.dmp

    Filesize

    25.1MB

  • memory/2388-353-0x0000000000260000-0x0000000000263000-memory.dmp

    Filesize

    12KB

  • memory/2388-354-0x0000000000400000-0x0000000001D14000-memory.dmp

    Filesize

    25.1MB

  • memory/2388-0-0x0000000000400000-0x0000000001D14000-memory.dmp

    Filesize

    25.1MB

  • memory/2388-356-0x0000000000400000-0x0000000001D14000-memory.dmp

    Filesize

    25.1MB

  • memory/2388-4-0x0000000075F80000-0x0000000076090000-memory.dmp

    Filesize

    1.1MB

  • memory/2388-358-0x0000000000400000-0x0000000001D14000-memory.dmp

    Filesize

    25.1MB

  • memory/2388-359-0x0000000000400000-0x0000000001D14000-memory.dmp

    Filesize

    25.1MB

  • memory/2388-360-0x0000000000400000-0x0000000001D14000-memory.dmp

    Filesize

    25.1MB

  • memory/2388-361-0x0000000000400000-0x0000000001D14000-memory.dmp

    Filesize

    25.1MB

  • memory/2388-362-0x0000000000400000-0x0000000001D14000-memory.dmp

    Filesize

    25.1MB

  • memory/2388-363-0x0000000000400000-0x0000000001D14000-memory.dmp

    Filesize

    25.1MB

  • memory/2388-364-0x0000000000400000-0x0000000001D14000-memory.dmp

    Filesize

    25.1MB

  • memory/2388-365-0x0000000000400000-0x0000000001D14000-memory.dmp

    Filesize

    25.1MB

  • memory/2388-366-0x0000000000400000-0x0000000001D14000-memory.dmp

    Filesize

    25.1MB

  • memory/2388-367-0x0000000000400000-0x0000000001D14000-memory.dmp

    Filesize

    25.1MB