Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    13-10-2023 21:28

General

  • Target

    HDFC_0714.exe

  • Size

    2.8MB

  • MD5

    13b1d6257b39fc71cc97e16d98d5a9f8

  • SHA1

    31ee10c6a4e7d919dcb8d4333a9516376365792f

  • SHA256

    104bdcceeb0a98bbeab3ae52100a5bd31a4fe7fa2b832ce36aa08c735be83227

  • SHA512

    a9826ca280f296ee33c5d3a822eba7c3f5bdd0f0f8e5390b83e6ebb752ad84b616a2b9b25af8ce09898bbec0227113e27dc8fc862852132c71fa498589a51ab3

  • SSDEEP

    49152:daozWskWk5cS7a+9XYaQ8Zehc4mTYJ78V9gyBn4cYfmP/SA8NEW:fzWsajJPZ942KQV9hp4XfmP/SA82W

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious use of SetWindowsHookEx 3 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\HDFC_0714.exe
    "C:\Users\Admin\AppData\Local\Temp\HDFC_0714.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2544
    • C:\Windows\SysWOW64\cmd.exe
      cmd.exe /c C:\Users\Admin\AppData\Local\Temp\
      2⤵
        PID:1208

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads