Analysis

  • max time kernel
    142s
  • max time network
    158s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/10/2023, 15:39

General

  • Target

    29b46b7d567a56df1067fba940b20e918595635131af15d8acf917ca1e2cf122.exe

  • Size

    15.8MB

  • MD5

    a97d1f9c6ce0296b57fbb1ec28b06d4a

  • SHA1

    98442fe1cbe1cc533dc9ac18ec9e04dbf319f762

  • SHA256

    29b46b7d567a56df1067fba940b20e918595635131af15d8acf917ca1e2cf122

  • SHA512

    ab5a449a512a9da4a141f0a8b24ea4c7030af50067a34e98135436f684071edaf0b0531b3be6db1344c5ceb05ea7e7842dcffda9c74af63d210856d57d0c448e

  • SSDEEP

    393216:dcxnff6ES9thlgzWCwThyBdMp5n0J8ZH6YqHzhOEh9BZTq2Bh/l:AfSEUlgElyXaAHBh9bTl

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\29b46b7d567a56df1067fba940b20e918595635131af15d8acf917ca1e2cf122.exe
    "C:\Users\Admin\AppData\Local\Temp\29b46b7d567a56df1067fba940b20e918595635131af15d8acf917ca1e2cf122.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3292

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\29b46b7d567a56df1067fba940b20e918595635131af15d8acf917ca1e2cf122.exepack.tmp

    Filesize

    2KB

    MD5

    67973a691ad5607955fef38c31309583

    SHA1

    653cfd523a36f8e61b13ba163427c0f4f6c60339

    SHA256

    6e78a0328a8389d3fe31b408553f3909a357de320ef77facb071686840d0c8a5

    SHA512

    5e05cecf526a1491c277c085f07b7baf0fb3de0c244f68d6a222ae2469eac5f39794571c90b133c88c216ca764bce6787998d7fe652072ea3ca3ddbb69643578

  • C:\Users\Admin\AppData\Local\Temp\3d82bf166995b8cb7eb2307f68af3ad2.ini

    Filesize

    1KB

    MD5

    804517aaf434859ba37a498bd0b3f0ca

    SHA1

    e729f5c395a1a356ad2d81c2cfe6c0d8003bcb08

    SHA256

    c75d492c093e87f18f5717c588bd78bd122f4e45e742de41dea1282b40fa9fe7

    SHA512

    522fa2e3f587343e5a4672c361191523563cffcf253e330dd1eff62a6bc7cbad07bf871d9e1900c3adc590f318ceb802961c4acd9ea4ba3c428ef6359dd92f56

  • C:\Users\Admin\AppData\Local\Temp\3d82bf166995b8cb7eb2307f68af3ad2A.ini

    Filesize

    1KB

    MD5

    704b33d07e6908b0dc01f80ab687bb94

    SHA1

    87edd59a0a16860ee869a8445a0957b953f8c08a

    SHA256

    fcbf7e050489e5bc277ab8bd476280275eedd93d2e2e47200d445c16197fac9c

    SHA512

    c738382e5f3f630dfbe27c6e9ba2938c9b79d52c57f1420a677c027c6f8c8a86e86154bc676258ff8d81596defd026d7578c145c0840bd887eabc14109138eb9

  • memory/3292-321-0x0000000000400000-0x0000000001D14000-memory.dmp

    Filesize

    25.1MB

  • memory/3292-360-0x0000000076CD0000-0x0000000076EE5000-memory.dmp

    Filesize

    2.1MB

  • memory/3292-7-0x0000000000400000-0x0000000001D14000-memory.dmp

    Filesize

    25.1MB

  • memory/3292-8-0x0000000001EE0000-0x0000000001EE3000-memory.dmp

    Filesize

    12KB

  • memory/3292-9-0x0000000077300000-0x00000000773F0000-memory.dmp

    Filesize

    960KB

  • memory/3292-10-0x0000000076CD0000-0x0000000076EE5000-memory.dmp

    Filesize

    2.1MB

  • memory/3292-4-0x0000000000400000-0x0000000001D14000-memory.dmp

    Filesize

    25.1MB

  • memory/3292-2-0x0000000000400000-0x0000000001D14000-memory.dmp

    Filesize

    25.1MB

  • memory/3292-1-0x0000000001EE0000-0x0000000001EE3000-memory.dmp

    Filesize

    12KB

  • memory/3292-0-0x0000000000400000-0x0000000001D14000-memory.dmp

    Filesize

    25.1MB

  • memory/3292-354-0x0000000077300000-0x00000000773F0000-memory.dmp

    Filesize

    960KB

  • memory/3292-6-0x0000000000400000-0x0000000001D14000-memory.dmp

    Filesize

    25.1MB

  • memory/3292-361-0x0000000000400000-0x0000000001D14000-memory.dmp

    Filesize

    25.1MB

  • memory/3292-362-0x0000000000400000-0x0000000001D14000-memory.dmp

    Filesize

    25.1MB

  • memory/3292-363-0x0000000000400000-0x0000000001D14000-memory.dmp

    Filesize

    25.1MB

  • memory/3292-364-0x0000000000400000-0x0000000001D14000-memory.dmp

    Filesize

    25.1MB

  • memory/3292-365-0x0000000000400000-0x0000000001D14000-memory.dmp

    Filesize

    25.1MB

  • memory/3292-366-0x0000000000400000-0x0000000001D14000-memory.dmp

    Filesize

    25.1MB

  • memory/3292-367-0x0000000000400000-0x0000000001D14000-memory.dmp

    Filesize

    25.1MB

  • memory/3292-368-0x0000000000400000-0x0000000001D14000-memory.dmp

    Filesize

    25.1MB

  • memory/3292-369-0x0000000000400000-0x0000000001D14000-memory.dmp

    Filesize

    25.1MB

  • memory/3292-370-0x0000000000400000-0x0000000001D14000-memory.dmp

    Filesize

    25.1MB