Analysis
-
max time kernel
117s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
12/10/2023, 04:26
Static task
static1
Behavioral task
behavioral1
Sample
c9ae8d37fec6ee35ff129af176c8da7f0e16f4f59dd482eff63cfd978cee10a0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
c9ae8d37fec6ee35ff129af176c8da7f0e16f4f59dd482eff63cfd978cee10a0.exe
Resource
win10v2004-20230915-en
General
-
Target
c9ae8d37fec6ee35ff129af176c8da7f0e16f4f59dd482eff63cfd978cee10a0.exe
-
Size
3.7MB
-
MD5
39237b5a869731a83068f6858e0b80c6
-
SHA1
613773562091ae43ceefe2422768766e868c7854
-
SHA256
c9ae8d37fec6ee35ff129af176c8da7f0e16f4f59dd482eff63cfd978cee10a0
-
SHA512
89ae9bd62be006dad3d56b936408fe3b14a891faa74384a8cf2898ac7edb37317aa9a3ac3fcef597ccb116d8e516960949966a5e826f1b62e6d06783905ec13b
-
SSDEEP
98304:hT37mhbacZFkvc8veTP+hU7oiOcQ1GwvZGVrlyKGy:Fkw9vjKGy
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2244 c9ae8d37fec6ee35ff129af176c8da7f0e16f4f59dd482eff63cfd978cee10a0.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2244 c9ae8d37fec6ee35ff129af176c8da7f0e16f4f59dd482eff63cfd978cee10a0.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2244 c9ae8d37fec6ee35ff129af176c8da7f0e16f4f59dd482eff63cfd978cee10a0.exe 2244 c9ae8d37fec6ee35ff129af176c8da7f0e16f4f59dd482eff63cfd978cee10a0.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\c9ae8d37fec6ee35ff129af176c8da7f0e16f4f59dd482eff63cfd978cee10a0.exe"C:\Users\Admin\AppData\Local\Temp\c9ae8d37fec6ee35ff129af176c8da7f0e16f4f59dd482eff63cfd978cee10a0.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2244
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.5MB
MD5298f5812023bab65ee23d13ee9489a6e
SHA171e9d7f205e5e7af6907c539c77a3aeea971692f
SHA256fe100d35b034c15ae3b74379f4eedd321c8e4b84fe666b54ee924ca2a8bdca6e
SHA512217258fb7728f61199f913fb98c894077c12a124e1596d1c6c7cfc065d4d2a6e1e03ad950c3321e2a8dcd997fb5c9524f98530db4bcb39f9914ecb5ff0e22dbd