9857bc7a4a8c262c6e9f5f323d582b8a1f0de902bff54a494cb4d867ac4fd9c9

Analysis

max time kernel
148s
max time network
131s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
22/12/2023, 15:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
dc40fe62ea24a3f372fab4f07444c6d0.exe
Size 140KB
Sample231222-s3fxmsaagl
SHA256 9857bc7a4a8c262c6e9f5f323d582b8a1f0de902bff54a494cb4d867ac4fd9c9
MD5 dc40fe62ea24a3f372fab4f07444c6d0
SHA1 2759d81667140751476a9e26e6aa52ddd8094f7d
SHA512 9f0236f27ee03f20815f54f0599980aa4756ac0d19b55124b813820343fd779e004d5f4b34539ebd7f9986fcb94f6eaf5d1076e14e1abc9af8bbb0201618b849
SSDEEP 3072:d9miuZtUTB4zewyO4mqIiSP4LUysWyx3bJU:CZtoB4ywd4JKA81
MD5 SHA1 SHA512 SSDEEP

Score

4^/10

Malware Config

Signatures

Drops file in Program Files directory 15 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\Internet Explorer\ielowutil.exe	dc40fe62ea24a3f372fab4f07444c6d0.exe
File opened for modification	C:\Program Files\Mozilla Firefox\crashreporter.exe	dc40fe62ea24a3f372fab4f07444c6d0.exe
File opened for modification	C:\Program Files (x86)\Internet Explorer\ieinstal.exe	dc40fe62ea24a3f372fab4f07444c6d0.exe
File opened for modification	C:\Program Files\Microsoft Office 15\ClientX64\IntegratedOffice.exe	dc40fe62ea24a3f372fab4f07444c6d0.exe
File opened for modification	C:\Program Files\Mozilla Firefox\minidump-analyzer.exe	dc40fe62ea24a3f372fab4f07444c6d0.exe
File opened for modification	C:\Program Files\Mozilla Firefox\uninstall\helper.exe	dc40fe62ea24a3f372fab4f07444c6d0.exe
File opened for modification	C:\Program Files\Mozilla Firefox\updater.exe	dc40fe62ea24a3f372fab4f07444c6d0.exe
File opened for modification	C:\Program Files\dotnet\dotnet.exe	dc40fe62ea24a3f372fab4f07444c6d0.exe
File opened for modification	C:\Program Files\Mozilla Firefox\plugin-container.exe	dc40fe62ea24a3f372fab4f07444c6d0.exe
File opened for modification	C:\Program Files (x86)\Google\Update\DisabledGoogleUpdate.exe	dc40fe62ea24a3f372fab4f07444c6d0.exe
File opened for modification	C:\Program Files (x86)\Internet Explorer\ielowutil.exe	dc40fe62ea24a3f372fab4f07444c6d0.exe
File opened for modification	C:\Program Files\Internet Explorer\iediagcmd.exe	dc40fe62ea24a3f372fab4f07444c6d0.exe
File opened for modification	C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe	dc40fe62ea24a3f372fab4f07444c6d0.exe
File opened for modification	C:\Program Files (x86)\Internet Explorer\ExtExport.exe	dc40fe62ea24a3f372fab4f07444c6d0.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\MicrosoftEdgeUpdate.exe	dc40fe62ea24a3f372fab4f07444c6d0.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4640	dc40fe62ea24a3f372fab4f07444c6d0.exe

C:\Users\Admin\AppData\Local\Temp\dc40fe62ea24a3f372fab4f07444c6d0.exe
"C:\Users\Admin\AppData\Local\Temp\dc40fe62ea24a3f372fab4f07444c6d0.exe"
1⤵
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
PID:4640

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads