c28fcba9cf679123b178167657d59645e98c82ea6624184b5b8f4bf01398c57b | Triage

Analysis

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20231025-en
resource tags

arch:x64arch:x86image:win7-20231025-enlocale:en-usos:windows7-x64system
submitted
17-11-2023 07:27

Sharing

Report Analysis Logs

General

Target

TATDTCM.exe
Size

5.2MB
MD5

55dca9f948ad3a7edd9791bbf39f09b0
SHA1

13eaa2d493067ab4df91136f2049ca9dc056c207
SHA256

2e954ce3f8d998562eac8afcb1c6995c3b2a7aaf1a7a55463d8fd98893a65ae7
SHA512

1ea1cdebb8494270691c314a1db5764b0200a2b2ae946310617caef3d214d104ec886635acda5354dc3b6985f75526493b74665d2d730637de84baae35dc1269
SSDEEP

98304:PPbkm+pR8ZLca1IO96qPduTajyok+cdW2nApmSwBldvnv3n5:ro8xca1I5qFuTWTy3nAsSWJ

Score

4^/10

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\ODBC.INI	TATDTCM.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2244	TATDTCM.exe
2244	TATDTCM.exe

C:\Users\Admin\AppData\Local\Temp\TATDTCM.exe
"C:\Users\Admin\AppData\Local\Temp\TATDTCM.exe"
1⤵
- Drops file in Windows directory
- Suspicious use of SetWindowsHookEx
PID:2244

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2244-0-0x0000000000400000-0x000000000111B000-memory.dmp

Filesize
13.1MB

Download
memory/2244-3-0x0000000000400000-0x000000000111B000-memory.dmp

Filesize
13.1MB

Download