Analysis
-
max time kernel
140s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
12-10-2023 17:04
Static task
static1
Behavioral task
behavioral1
Sample
f3ee069750937452f6236ecf1df7f95e0e6fdbafb46241e18e9e6dda1e85ce8c.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
f3ee069750937452f6236ecf1df7f95e0e6fdbafb46241e18e9e6dda1e85ce8c.exe
Resource
win10v2004-20230915-en
General
-
Target
f3ee069750937452f6236ecf1df7f95e0e6fdbafb46241e18e9e6dda1e85ce8c.exe
-
Size
4.0MB
-
MD5
0dba24a7d5da6fa263cf9232abe1af0c
-
SHA1
6a83f32cbd548d1887bb3fdfeac7523c01870c9e
-
SHA256
f3ee069750937452f6236ecf1df7f95e0e6fdbafb46241e18e9e6dda1e85ce8c
-
SHA512
24e483df0262f8062c1c9d08e00224802f306e725ffaa317b27bec1c1dfd9545abbac996f5f9d88759dda2425171a7a5b96f66f9547cc76324070330dc3f33e4
-
SSDEEP
98304:m4ZeadDOJ/GxRBViRlWgWsZuJn7DH0r1c:mWDLBViRlWrJJvH0r
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 5084 f3ee069750937452f6236ecf1df7f95e0e6fdbafb46241e18e9e6dda1e85ce8c.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 5084 f3ee069750937452f6236ecf1df7f95e0e6fdbafb46241e18e9e6dda1e85ce8c.exe 5084 f3ee069750937452f6236ecf1df7f95e0e6fdbafb46241e18e9e6dda1e85ce8c.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.8MB
MD51cf6b966365f29d060154fa5eb5c7f72
SHA1bb110d37a96878c8c024a450d0b09cc28ef03cf0
SHA2560e11b955048104466ed8d86db346628c1b30118ae116fa0428b0c34f486d8cf3
SHA5126bc266813f4518f1b5e958c047972072d6d43996add9587b3c3b7ac64e2406784a2240cc9b815f29208b9b3ef77e0b647a1201ef39aab10eb3bec297294d2dad