Analysis
-
max time kernel
178s -
max time network
216s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
25/12/2023, 07:48
Static task
static1
Behavioral task
behavioral1
Sample
0ffb3f71239a5f59572a9e397bb9e46c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0ffb3f71239a5f59572a9e397bb9e46c.exe
Resource
win10v2004-20231215-en
General
-
Target
0ffb3f71239a5f59572a9e397bb9e46c.exe
-
Size
596KB
-
MD5
0ffb3f71239a5f59572a9e397bb9e46c
-
SHA1
dcb0452c9a066481abb9592efd602122fb85e79c
-
SHA256
8629295fccb643127d6684d1670e6d6ade434c83822a746eb2592229c96b444a
-
SHA512
a2158d938492ebce020f1f4a0222915ae4187b64a7ce1f8ded5e78445fe1a4c4c8f6dc22e5490a9a53a81383dcca372ce563168550156a8da9b038b193adf8f0
-
SSDEEP
12288:Raad5YgOr8vvvvvEvvvvvARkU8aaF471aEA88MR4713wzMyaahwYhV6:RaaddOwkU8aaF471aEA814713wvaahr6
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 416 0ffb3f71239a5f59572a9e397bb9e46c.exe -
Drops file in System32 directory 2 IoCs
description ioc Process File created C:\Windows\SysWOW64\oledsp32.dl_ 0ffb3f71239a5f59572a9e397bb9e46c.exe File created C:\Windows\SysWOW64\oledsp32.dll 0ffb3f71239a5f59572a9e397bb9e46c.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 416 0ffb3f71239a5f59572a9e397bb9e46c.exe 416 0ffb3f71239a5f59572a9e397bb9e46c.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
25KB
MD526f30e177d62e78e82b1b550868ff3ba
SHA19eb0f346ff80be8e0c072b8508f39527982fa64b
SHA256c533d2dd651df0c1a97c7b0e5784b9a42a58e5e64115b540e8c521cbd192e1ca
SHA5129948211e30ce42860adf23a80b2c2f25397311ec699999d42466ef46d1ae79c883393f0bcefbbcbf5ecd6a6c6d36d99c4a38631a5144506efab76dbcb01f29c9