Analysis
-
max time kernel
160s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
12/10/2023, 03:43
General
-
Target
77c80c2814b42aed71e0d39ad5ec5b6c7cc8adcad9c14fd315315ee76b4f11fd.exe
-
Size
80KB
-
MD5
f7110d120347c374d115f2624bcab62e
-
SHA1
ae0122c10f9461b55d7d2633967f08ba112c30f7
-
SHA256
77c80c2814b42aed71e0d39ad5ec5b6c7cc8adcad9c14fd315315ee76b4f11fd
-
SHA512
e6d328598e40f23ae781835218274f304dee0f3e2e7fba5b64ffe1423d48c46bc1dcfddc3666222491682b2678a268c96cc916168438677833115e9e1568448a
-
SSDEEP
1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOrv3dmD:GhfxHNIreQm+HiYv3d0
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Modifies system executable filetype association 2 TTPs 5 IoCs
-
Drops file in System32 directory 4 IoCs
-
Drops file in Windows directory 2 IoCs
-
Modifies registry class 15 IoCs
-
Suspicious behavior: EnumeratesProcesses 28 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\77c80c2814b42aed71e0d39ad5ec5b6c7cc8adcad9c14fd315315ee76b4f11fd.exe"C:\Users\Admin\AppData\Local\Temp\77c80c2814b42aed71e0d39ad5ec5b6c7cc8adcad9c14fd315315ee76b4f11fd.exe"1⤵
- Modifies system executable filetype association
- Drops file in System32 directory
- Drops file in Windows directory
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\system\rundll32.exeC:\Windows\system\rundll32.exe2⤵
- Executes dropped EXE
- Modifies system executable filetype association
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
73KB
MD5fcf8cf1d13ef7277f849446d1889947b
SHA119b6c45dc3ccc5f664ec331560b4ca585acebd2d
SHA25606a5f90735b5704297565e75474071ffe8cd14868dd5b0f13e02e5730ce6f65f
SHA5126b811f19829cce840c78e093922ab343e3397f0f7267aee440a68ba53d3a6f94f180638e304a1a61168dfd67cf46492ff7a0e75825d28e051a4ad3481521a29e
-
Filesize
83KB
MD59e58cd1d88f656b2f4574398130bb8b4
SHA1c787e04e2e39713df94c816aec4041fb07e00c0e
SHA2562a90f3c06ce556089e267c500dcdf627bd26f662b7f8b3fca6423cda53b1ad8d
SHA512812ef284d7ffd64b50b956a28f383b99f435fb3bfe5c3ddfb00fff77671c2aa9b313066d85fbb97808ac0b1bbae9cfc754dc6e25ee208b804873e2342d874dae
-
Filesize
83KB
MD59e58cd1d88f656b2f4574398130bb8b4
SHA1c787e04e2e39713df94c816aec4041fb07e00c0e
SHA2562a90f3c06ce556089e267c500dcdf627bd26f662b7f8b3fca6423cda53b1ad8d
SHA512812ef284d7ffd64b50b956a28f383b99f435fb3bfe5c3ddfb00fff77671c2aa9b313066d85fbb97808ac0b1bbae9cfc754dc6e25ee208b804873e2342d874dae
-
Filesize
86KB
-
Filesize
86KB
-
Filesize
86KB