Analysis

  • max time kernel
    118s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    12/10/2023, 23:56

General

  • Target

    acec7c9a47ad70d8ffdbd8d0a6ef98dfecefab032d4320a36c86841bf81d451d.exe

  • Size

    992KB

  • MD5

    e58a555ed1f5e757c1631900dcbe495b

  • SHA1

    cf924abb2569171d48c08ce608da40251a5861bf

  • SHA256

    acec7c9a47ad70d8ffdbd8d0a6ef98dfecefab032d4320a36c86841bf81d451d

  • SHA512

    1b597512165e0dd2120fba27da49c0a044d3ab8306778f5cbc603c9288d603d1df5672ef45b354d5a7a9b3d9a5c26941585eda4664b9b21d82704efd93011aa3

  • SSDEEP

    12288:dnqiGZJaovTcVvSFy7gXtOXe4AT9wDLRAEHN/EGQMnP1fLcsyFT:dnqiGZrUvMyoOXpAp8LRATG5P7yR

Score
8/10

Malware Config

Signatures

  • Sets service image path in registry 2 TTPs 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious behavior: LoadsDriver 3 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\acec7c9a47ad70d8ffdbd8d0a6ef98dfecefab032d4320a36c86841bf81d451d.exe
    "C:\Users\Admin\AppData\Local\Temp\acec7c9a47ad70d8ffdbd8d0a6ef98dfecefab032d4320a36c86841bf81d451d.exe"
    1⤵
    • Sets service image path in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2824

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads