Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    21/10/2023, 13:39

General

  • Target

    8b5afe87cec636f422a8e83b23a6db6bcc797cfbf345b64bb9f1666b694e4a09.exe

  • Size

    309KB

  • MD5

    eb5f5c9ef0135d179ec299f7e13b7b38

  • SHA1

    be80eed54b4f015ee024227fcd234a2c8a03ecce

  • SHA256

    8b5afe87cec636f422a8e83b23a6db6bcc797cfbf345b64bb9f1666b694e4a09

  • SHA512

    fb92f3638b2f127899f8d468d0ecf388856a6e98913c7aef0a30711dfa81029c27e7facce9a507042676331266b448ba5fd600b05a2a2171f7aa0e83de9661b0

  • SSDEEP

    6144:HphoeNEnaI5268QyHU6FDOQSMjhodwImZQp4C8VeX2uiDHRcx3W0+PNgi26aV:J1ET5268QyHU6YVsVZy4CbXsyxDEWr6w

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: RenamesItself 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8b5afe87cec636f422a8e83b23a6db6bcc797cfbf345b64bb9f1666b694e4a09.exe
    "C:\Users\Admin\AppData\Local\Temp\8b5afe87cec636f422a8e83b23a6db6bcc797cfbf345b64bb9f1666b694e4a09.exe"
    1⤵
    • Suspicious behavior: RenamesItself
    • Suspicious use of SetWindowsHookEx
    PID:2332

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2332-0-0x0000000000400000-0x000000000053D000-memory.dmp

          Filesize

          1.2MB

        • memory/2332-1-0x00000000001C0000-0x00000000001C1000-memory.dmp

          Filesize

          4KB

        • memory/2332-2-0x0000000000400000-0x000000000053D000-memory.dmp

          Filesize

          1.2MB

        • memory/2332-4-0x0000000000400000-0x000000000053D000-memory.dmp

          Filesize

          1.2MB