Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
20-12-2023 08:30
Static task
static1
Behavioral task
behavioral1
Sample
6a60bb89f83b1bf201e2552ed71ff0c7d24f3620992c82382e266f88feeb0814.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6a60bb89f83b1bf201e2552ed71ff0c7d24f3620992c82382e266f88feeb0814.exe
Resource
win10v2004-20231215-en
General
-
Target
6a60bb89f83b1bf201e2552ed71ff0c7d24f3620992c82382e266f88feeb0814.exe
-
Size
951KB
-
MD5
c6f4b84ea898f6a46cf5c4d78b84b58d
-
SHA1
9a70d273c9e6c05dc8ca1d449eb7bf9bbe0206a1
-
SHA256
6a60bb89f83b1bf201e2552ed71ff0c7d24f3620992c82382e266f88feeb0814
-
SHA512
a7cd8277ae8da1103c825a9b66c184428d86e13924d6edef6f0dc247b5e8258e7645e6945fe379950722e206d3f2cb949c3fbff34d3171b2335a339e0f833cdf
-
SSDEEP
24576:k0FaewhcAu6vcEDdNAlRQY1IJQTGngTqhG7:itw4cEDd2l12iTGnWqh
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 2028 6a60bb89f83b1bf201e2552ed71ff0c7d24f3620992c82382e266f88feeb0814.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2028 6a60bb89f83b1bf201e2552ed71ff0c7d24f3620992c82382e266f88feeb0814.exe 2028 6a60bb89f83b1bf201e2552ed71ff0c7d24f3620992c82382e266f88feeb0814.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\6a60bb89f83b1bf201e2552ed71ff0c7d24f3620992c82382e266f88feeb0814.exe"C:\Users\Admin\AppData\Local\Temp\6a60bb89f83b1bf201e2552ed71ff0c7d24f3620992c82382e266f88feeb0814.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:2028
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4R90HQQX\18BGNOEF.htm
Filesize432KB
MD535344d2b3e729013d32ab573b8513dc2
SHA18d69af4dceb7c3c2365cbbb9d401ee867c310247
SHA256ef65803978b0899b5a35a61a39b73cdfd1323f724d189bb74f90a8e75cca9351
SHA512859f58178bf52b92a271984034ef346cb06f96575a31292ecbdea909e2a136965c808ddd6a05d1f112bc49fc624bab377993f5e5468595a0be4be6b01cdadd83