Analysis
-
max time kernel
148s -
max time network
145s -
platform
windows7_x64 -
resource
win7-20231023-en -
resource tags
arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system -
submitted
08/12/2023, 12:31
Behavioral task
behavioral1
Sample
17020384843af0d57b8c47e4f7c45e8ba4414521303dd4972bbccb99aeb71a0d3645cbebd8676.dat-decoded.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
17020384843af0d57b8c47e4f7c45e8ba4414521303dd4972bbccb99aeb71a0d3645cbebd8676.dat-decoded.exe
Resource
win10v2004-20231127-en
General
-
Target
17020384843af0d57b8c47e4f7c45e8ba4414521303dd4972bbccb99aeb71a0d3645cbebd8676.dat-decoded.exe
-
Size
483KB
-
MD5
b1db2292ba6cdddc3237f97f0ee0324f
-
SHA1
bfb619c64db6473bf8dbbf91c75a430945707ab3
-
SHA256
a175371e9373a87e16ced87d403fb50247705163ea786a5eba3209cb66ed4390
-
SHA512
bc41c01e6efec1f2682c741f527537f1fc02906fc17288dd769e0bb1c9319999083f94d249c861624fb12d8cc0d40e220941c0cb90ad4413ddd33e85942bfc01
-
SSDEEP
6144:y/7iPrcL3ArwhBq7Kjsn9iHGXg0lwGS9MNNhdFvPxps9gsAOZZuAXec7k7ov:y/uPq3AfK496Gw0lwGXN3pvs/ZuR8v
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2584 17020384843af0d57b8c47e4f7c45e8ba4414521303dd4972bbccb99aeb71a0d3645cbebd8676.dat-decoded.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\17020384843af0d57b8c47e4f7c45e8ba4414521303dd4972bbccb99aeb71a0d3645cbebd8676.dat-decoded.exe"C:\Users\Admin\AppData\Local\Temp\17020384843af0d57b8c47e4f7c45e8ba4414521303dd4972bbccb99aeb71a0d3645cbebd8676.dat-decoded.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:2584
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
144B
MD527fdffb69e432cc4b97381dc0fa17494
SHA150b5e8feb23eed737741408d656c7c4fad378fda
SHA256c6cf171fabf747f7a22e25d43ba0a6f46a7e10da048ee90d6f9a2f20a4bdfd31
SHA51292f0275ca4791b554637e9907916294cb3600f197adb822970b6c50c130f6dcc584928492b343d422d3f11895df74f07cae4a4501fa7aeb37b9094b0d1f5cdff