c3def36b65e2a13f5675b68c5a60842935240580c71ba559a3cd1efc6843f676 | Triage

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20231025-en
resource tags

arch:x64arch:x86image:win7-20231025-enlocale:en-usos:windows7-x64system
submitted
26-11-2023 01:23

Sharing

Report Analysis Logs

General

Target

xinput1_3.dll
Size

142KB
MD5

f26b59ba3bece9d04b92415a3205667a
SHA1

09337ad2b5b345aa75ef32a31c828038fd892166
SHA256

2d8e3e39ffa1c5cf15f6a7f6cc8020d00d8277b1c2e61c49443b80fc1fbe97ad
SHA512

ebbbe5d7d6fe008ed72415372edb0048745c588268e14dd466fe126b3a1a39d48b44a86fe4900d50d65a479c364e1e32a2e2acfd3329ce1c16e035c197c1dbca
SSDEEP

3072:/sZZ9z1L0ZMBkQTV0ebWN0fwC+INtm3A3TGzOpOAR1A0tWgKB:/sZZ11AOB93wCltm3epOAR1o

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes:

rundll32.exe

pid process

2380 rundll32.exe
2380 rundll32.exe
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

rundll32.exe

pid process

2380 rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\xinput1_3.dll,#1
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:2380

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...