Analysis

  • max time kernel
    149s
  • max time network
    153s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    20-12-2023 08:30

General

  • Target

    6a60bb89f83b1bf201e2552ed71ff0c7d24f3620992c82382e266f88feeb0814.exe

  • Size

    951KB

  • MD5

    c6f4b84ea898f6a46cf5c4d78b84b58d

  • SHA1

    9a70d273c9e6c05dc8ca1d449eb7bf9bbe0206a1

  • SHA256

    6a60bb89f83b1bf201e2552ed71ff0c7d24f3620992c82382e266f88feeb0814

  • SHA512

    a7cd8277ae8da1103c825a9b66c184428d86e13924d6edef6f0dc247b5e8258e7645e6945fe379950722e206d3f2cb949c3fbff34d3171b2335a339e0f833cdf

  • SSDEEP

    24576:k0FaewhcAu6vcEDdNAlRQY1IJQTGngTqhG7:itw4cEDd2l12iTGnWqh

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6a60bb89f83b1bf201e2552ed71ff0c7d24f3620992c82382e266f88feeb0814.exe
    "C:\Users\Admin\AppData\Local\Temp\6a60bb89f83b1bf201e2552ed71ff0c7d24f3620992c82382e266f88feeb0814.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2028

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4R90HQQX\18BGNOEF.htm

    Filesize

    432KB

    MD5

    35344d2b3e729013d32ab573b8513dc2

    SHA1

    8d69af4dceb7c3c2365cbbb9d401ee867c310247

    SHA256

    ef65803978b0899b5a35a61a39b73cdfd1323f724d189bb74f90a8e75cca9351

    SHA512

    859f58178bf52b92a271984034ef346cb06f96575a31292ecbdea909e2a136965c808ddd6a05d1f112bc49fc624bab377993f5e5468595a0be4be6b01cdadd83

  • memory/2028-0-0x0000000000400000-0x0000000000598000-memory.dmp

    Filesize

    1.6MB

  • memory/2028-16-0x0000000000400000-0x0000000000598000-memory.dmp

    Filesize

    1.6MB