Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 00:09

General

  • Target

    1bdb50cd2af0431cf678002fd030a8d9.exe

  • Size

    238KB

  • MD5

    1bdb50cd2af0431cf678002fd030a8d9

  • SHA1

    19bcf12d263aab495c3a95559e194cbc94d1df0e

  • SHA256

    143406bf607a5e20d1998319f6d5d58711305634c474d5c65892c85ad41f60d3

  • SHA512

    e71564eb31c3c89a221d51566c20203a40eb51e600b22a6272e6b18c5187ae37973f1636b15c2bb0be0d566005e7ea216067feb5b8be509155a3d4ada5bfc243

  • SSDEEP

    6144:uEUQ4OK95WBK6eBr+80vXO8wL1z6jFH56ySPxcNrmb:KQtK6UT0m8KV6jFZ6yS5d

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1bdb50cd2af0431cf678002fd030a8d9.exe
    "C:\Users\Admin\AppData\Local\Temp\1bdb50cd2af0431cf678002fd030a8d9.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of SetWindowsHookEx
    PID:1072

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1072-4-0x00000000002B0000-0x0000000000323000-memory.dmp

    Filesize

    460KB

  • memory/1072-0-0x0000000000400000-0x0000000000412000-memory.dmp

    Filesize

    72KB

  • memory/1072-5-0x00000000002B0000-0x0000000000323000-memory.dmp

    Filesize

    460KB

  • memory/1072-6-0x0000000000400000-0x0000000000412000-memory.dmp

    Filesize

    72KB