Overview

overview

6

Static

static

3

HWMonitor.exe

windows7-x64

6

HWMonitor.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    HWMonitor.exe

  • Size

    6.4MB

  • Sample

    231215-b7zf4shgeq

  • MD5

    19a05a559b0c478f3049cd414300a340

  • SHA1

    fadbbb63e948b5b3bbbaeedc77e69472143a3b86

  • SHA256

    000752074544950ae9020a35ccd77de277f1cd5026b4b9559279dc3b86965eee

  • SHA512

    1f9b320048958fb5b81b8dc6f8ab402d795175dda3476f7cc7251642383345538320eaa4d24de7d0f7e2d2d59073cbc9a250226ee06bc0f0dfab8bb5673aaa84

  • SSDEEP

    49152:GkzIAFeiibxQU6vdYqTzEuZf6Q9iBUqL5cQf3S9+uCQHSvT9A+aoNDqcKqQx759B:Nnu7S/QN+on

Score
6/10

Malware Config

Targets

    • Target

      HWMonitor.exe

    • Size

      6.4MB

    • MD5

      19a05a559b0c478f3049cd414300a340

    • SHA1

      fadbbb63e948b5b3bbbaeedc77e69472143a3b86

    • SHA256

      000752074544950ae9020a35ccd77de277f1cd5026b4b9559279dc3b86965eee

    • SHA512

      1f9b320048958fb5b81b8dc6f8ab402d795175dda3476f7cc7251642383345538320eaa4d24de7d0f7e2d2d59073cbc9a250226ee06bc0f0dfab8bb5673aaa84

    • SSDEEP

      49152:GkzIAFeiibxQU6vdYqTzEuZf6Q9iBUqL5cQf3S9+uCQHSvT9A+aoNDqcKqQx759B:Nnu7S/QN+on

    Score
    6/10

    • GLES Rule: track HazyLoad proxy tool in memory.

      detect proxy-related strings loaded in memory by HazyLoad loader.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks