Analysis
-
max time kernel
3s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
22/12/2023, 16:29
General
-
Target
f0dee11c4287dc8424dcf1408a7a9fa0.exe
-
Size
52KB
-
MD5
f0dee11c4287dc8424dcf1408a7a9fa0
-
SHA1
fc25c2573b83e67c386e47aa12f31452136aa613
-
SHA256
fb7a5f92f2cb6ec57194043245fa6892ece692733add0976fe7092075069abc9
-
SHA512
414d970632cdfc707f843792f1591a96f169f0869622eb6c7c21dfc0a3ce06240977cf822dcde78f7fd5d009772eeca26b43a69e6270615cfd27ccf4b5d68a62
-
SSDEEP
768:wVWnGwwaDKRp1jskr/v/m89S3rkC6R+wibw52Tzp9I:wvQKRpNskr3mbkC6R+Xp9I
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of SetWindowsHookEx 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f0dee11c4287dc8424dcf1408a7a9fa0.exe"C:\Users\Admin\AppData\Local\Temp\f0dee11c4287dc8424dcf1408a7a9fa0.exe"1⤵
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\zeube.exe"C:\Users\Admin\zeube.exe"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-