Analysis

  • max time kernel
    120s
  • max time network
    180s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    24-12-2023 20:10

General

  • Target

    0fff1d6380681e44de524b364b804420.exe

  • Size

    201KB

  • MD5

    0fff1d6380681e44de524b364b804420

  • SHA1

    7478ac7568233ae6ed286ae5a3614ff0752898c6

  • SHA256

    9923f667d90a202efb9a0724ffbd417739a7bcda43ab91eeb4b89eaff2c3eef3

  • SHA512

    76f0b1eda08debc8a0b7140577da5662c2bd7804c22ad9824f89afe5eb32160324d6525572ee724b9e80add40905c4ad04d8af82f7695dde6bc70f5d04db5f43

  • SSDEEP

    6144:3LprOcD1xM47KzlfgR0hAycYQYI9m2NtgvPS:b8cxf2zlfgR0hAycYQYI9m2NtgvPS

Score
6/10

Malware Config

Signatures

  • Legitimate hosting services abused for malware hosting/C2 1 TTPs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0fff1d6380681e44de524b364b804420.exe
    "C:\Users\Admin\AppData\Local\Temp\0fff1d6380681e44de524b364b804420.exe"
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of SetWindowsHookEx
    PID:2756

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2756-0-0x0000000074BA0000-0x000000007528E000-memory.dmp

    Filesize

    6.9MB

  • memory/2756-1-0x0000000000AC0000-0x0000000000AF8000-memory.dmp

    Filesize

    224KB

  • memory/2756-2-0x0000000000800000-0x0000000000824000-memory.dmp

    Filesize

    144KB

  • memory/2756-3-0x0000000001F20000-0x0000000001F60000-memory.dmp

    Filesize

    256KB

  • memory/2756-6-0x0000000001F20000-0x0000000001F60000-memory.dmp

    Filesize

    256KB

  • memory/2756-5-0x0000000000650000-0x000000000065A000-memory.dmp

    Filesize

    40KB

  • memory/2756-4-0x0000000000650000-0x000000000065A000-memory.dmp

    Filesize

    40KB

  • memory/2756-9-0x0000000001F20000-0x0000000001F60000-memory.dmp

    Filesize

    256KB

  • memory/2756-43-0x000000000BD20000-0x000000000C4C6000-memory.dmp

    Filesize

    7.6MB

  • memory/2756-76-0x0000000074BA0000-0x000000007528E000-memory.dmp

    Filesize

    6.9MB

  • memory/2756-77-0x0000000001F20000-0x0000000001F60000-memory.dmp

    Filesize

    256KB

  • memory/2756-80-0x0000000000650000-0x000000000065A000-memory.dmp

    Filesize

    40KB