Analysis

  • max time kernel
    191s
  • max time network
    200s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12-10-2023 08:55

General

  • Target

    9b0152f3a1bc64fe5322db07131ac2a77c03e88e8b9ebb8ba872f74a674da045.exe

  • Size

    10.8MB

  • MD5

    6beeea8c8d1e32cda351cdedcf325f49

  • SHA1

    53246b8583f2505e75d0c0971bb186524d618ec6

  • SHA256

    9b0152f3a1bc64fe5322db07131ac2a77c03e88e8b9ebb8ba872f74a674da045

  • SHA512

    9710887db57ffb50515134880fc6533773b073fddf99f5d0669d631778a53d2df0a7f48551c1e23e6ba8c68e6aaff0f9c586432bf303f9f72693e9a3dbd32f84

  • SSDEEP

    196608:riqFfVgjkYWjSiTYDuQTaijGf8TYxMFd+46N+yuXmiNKn8X8q3VcxeX6gq:riG0kYWOk1Q7jGEYxgb1XXYn2wq6l

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9b0152f3a1bc64fe5322db07131ac2a77c03e88e8b9ebb8ba872f74a674da045.exe
    "C:\Users\Admin\AppData\Local\Temp\9b0152f3a1bc64fe5322db07131ac2a77c03e88e8b9ebb8ba872f74a674da045.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4712

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\086aa6242660533522bfe9279f532e23.ini

    Filesize

    1KB

    MD5

    6e4de6ec069a253d607f235f8be154f9

    SHA1

    4008feed1f78dffe8217a8f4eb0ca1d04233d12e

    SHA256

    273ab9325ca89214f1674f957c6d4ce0730db61b6891cef3959bd8be60f7b7ca

    SHA512

    fb20f1f6b85585fe7982a746b65bde7c2754dc91169a23ac57f7b2d6681de0bf34d5eb972417e2da7dc028fa473f20a904642765c72d6551916301009c47a998

  • C:\Users\Admin\AppData\Local\Temp\086aa6242660533522bfe9279f532e23A.ini

    Filesize

    1KB

    MD5

    dff46f7ffe396f09bc7978d4f2784156

    SHA1

    d3847423fd9a34beae449e6ba941109842715159

    SHA256

    c26b55bff01b8a4820c27c7aa87a07208fbf6d782a28ea78f7bd1d3741342284

    SHA512

    dfd9ee630496991fb4b0c266b4f6bbe021666e0d3286c15b678c69057745c869a6e391ebda33c53d7a49539e293935366f193e2fccc78451f88850d6c8f581de

  • C:\Users\Admin\AppData\Local\Temp\9b0152f3a1bc64fe5322db07131ac2a77c03e88e8b9ebb8ba872f74a674da045.exepack.tmp

    Filesize

    2KB

    MD5

    e9007e5f8dbb3e69a35583c2a6002c7c

    SHA1

    455a8830cc9eef1281fe5f897fb2b2d666b94c94

    SHA256

    28e7a8234d6a1c8b673ba57174bf2f406f185b51670f1d2b25a9cd10da44bbac

    SHA512

    8d07b47414debe897de5bc6c4152803236c321d50f486ec4710027f0ae1a54a634d71eb37756025faed58fe4a6c48b5b038b2908756a973928183d990f985768

  • memory/4712-332-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/4712-334-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/4712-1-0x00000000022C0000-0x00000000022C3000-memory.dmp

    Filesize

    12KB

  • memory/4712-317-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/4712-329-0x00000000022C0000-0x00000000022C3000-memory.dmp

    Filesize

    12KB

  • memory/4712-330-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/4712-331-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/4712-0-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/4712-333-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/4712-2-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/4712-335-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/4712-336-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/4712-337-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/4712-338-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/4712-339-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/4712-340-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/4712-341-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/4712-342-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/4712-343-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB

  • memory/4712-344-0x0000000000400000-0x0000000001CF0000-memory.dmp

    Filesize

    24.9MB