Analysis
-
max time kernel
138s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
-
submitted
26-11-2023 14:01
General
-
Target
138eb49155b9f68e8161f3f33115a9b796c02ad2c62f2235df42db6312859574.exe
-
Size
4.7MB
-
MD5
8d5dc6bd710a9d27bb4317b5f9502e23
-
SHA1
c00c79a6a8f0d501c0a61ab799a1619cd921d7d6
-
SHA256
138eb49155b9f68e8161f3f33115a9b796c02ad2c62f2235df42db6312859574
-
SHA512
2fdcdd95b0bb5c52b25944d5a0f5fc5a825f7021fc2d7de8a951c5794ea8437353301c722988a32300d7435a7bc732fd3ec0bbc0e8b0ad2746de6e38b733e178
-
SSDEEP
98304:EZHz63AW6M0n1RMqMzM0u2ug1JwUn5TJ5yNivnD:vUnMzF1f5TJMSD
Malware Config
Signatures
-
Loads dropped DLL 4 IoCs
-
Drops file in Windows directory 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 6 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of SetWindowsHookEx 6 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\138eb49155b9f68e8161f3f33115a9b796c02ad2c62f2235df42db6312859574.exe"C:\Users\Admin\AppData\Local\Temp\138eb49155b9f68e8161f3f33115a9b796c02ad2c62f2235df42db6312859574.exe"1⤵
- Loads dropped DLL
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: RenamesItself
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\138eb49155b9f68e8161f3f33115a9b796c02ad2c62f2235df42db6312859574.exeC:\Users\Admin\AppData\Local\Temp\138eb49155b9f68e8161f3f33115a9b796c02ad2c62f2235df42db6312859574.exe --2⤵
- Loads dropped DLL
- Drops file in Windows directory
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.6MB
MD5031ad1ecd93701d39265771942ec716c
SHA1cb3ef507bf0e848894fbb96a29bfc94a0c302152
SHA2569a7fde2ea7883701bf858e0daef74d787a31c3cbd9f1171cec0a3a382ee9e6ba
SHA512374dab32b6304834c7acd8b5e6701ece016bf57d3abdd416ef2b63f7cbda24c9e59f9dfc27b6823ac6256bbab38aace74334dec7d57f1ef6cb9b80c239003bae
-
Filesize
1.6MB
MD5031ad1ecd93701d39265771942ec716c
SHA1cb3ef507bf0e848894fbb96a29bfc94a0c302152
SHA2569a7fde2ea7883701bf858e0daef74d787a31c3cbd9f1171cec0a3a382ee9e6ba
SHA512374dab32b6304834c7acd8b5e6701ece016bf57d3abdd416ef2b63f7cbda24c9e59f9dfc27b6823ac6256bbab38aace74334dec7d57f1ef6cb9b80c239003bae
-
Filesize
1.6MB
MD5031ad1ecd93701d39265771942ec716c
SHA1cb3ef507bf0e848894fbb96a29bfc94a0c302152
SHA2569a7fde2ea7883701bf858e0daef74d787a31c3cbd9f1171cec0a3a382ee9e6ba
SHA512374dab32b6304834c7acd8b5e6701ece016bf57d3abdd416ef2b63f7cbda24c9e59f9dfc27b6823ac6256bbab38aace74334dec7d57f1ef6cb9b80c239003bae
-
Filesize
1.4MB
MD5736228b33e34445eaf8c16b864294c27
SHA16c77cb3c3f6ed94fc61d03383fa19f09a56b3c77
SHA256c8015c473252a432d131bf2dd53a1172acdc05870de399f4456dce3edbc847cc
SHA5127849dcccc0f59e89930b57b921ad3733816b6f857c2ae0905f6e1e3221603aba9fd382a3f255e76fb06128376f8f9eb79a0a30d4ea8b476d86a0163535644cec
-
Filesize
1.4MB
MD5736228b33e34445eaf8c16b864294c27
SHA16c77cb3c3f6ed94fc61d03383fa19f09a56b3c77
SHA256c8015c473252a432d131bf2dd53a1172acdc05870de399f4456dce3edbc847cc
SHA5127849dcccc0f59e89930b57b921ad3733816b6f857c2ae0905f6e1e3221603aba9fd382a3f255e76fb06128376f8f9eb79a0a30d4ea8b476d86a0163535644cec
-
Filesize
1.4MB
MD5736228b33e34445eaf8c16b864294c27
SHA16c77cb3c3f6ed94fc61d03383fa19f09a56b3c77
SHA256c8015c473252a432d131bf2dd53a1172acdc05870de399f4456dce3edbc847cc
SHA5127849dcccc0f59e89930b57b921ad3733816b6f857c2ae0905f6e1e3221603aba9fd382a3f255e76fb06128376f8f9eb79a0a30d4ea8b476d86a0163535644cec