e78456b7cc21f2188461d0707b4a08b8714b2bca62ac4d90e11aaeafede67be9

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25/12/2023, 12:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

1df2778137bf720f1856aff51db4a630.exe
Size

653KB
MD5

1df2778137bf720f1856aff51db4a630
SHA1

0880eadf3a531cdfe7cd140fc9698b2ee0b2162f
SHA256

e78456b7cc21f2188461d0707b4a08b8714b2bca62ac4d90e11aaeafede67be9
SHA512

9c9cbc0eed6adacb06ee65a64e910a52b64abcd969316eac6651d5c4cbfbaa727c38527442e5dda022d3fedd384e5672c00b43ebd227279ba0ec9665bf71860e
SSDEEP

12288:ZiuPOzzqERmou6YTZj5RagORUDVyLmg/TnGc4:ZidRmou6C+TRUDELTnGc4

Score

1^/10

Malware Config

Signatures

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.key	1df2778137bf720f1856aff51db4a630.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.key\	1df2778137bf720f1856aff51db4a630.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.key\ = "regfile"	1df2778137bf720f1856aff51db4a630.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1616	1df2778137bf720f1856aff51db4a630.exe

C:\Users\Admin\AppData\Local\Temp\1df2778137bf720f1856aff51db4a630.exe
"C:\Users\Admin\AppData\Local\Temp\1df2778137bf720f1856aff51db4a630.exe"
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:1616

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1616-0-0x0000000000400000-0x0000000000558000-memory.dmp

Filesize
1.3MB

Download
memory/1616-1-0x00000000022F0000-0x0000000002325000-memory.dmp

Filesize
212KB

Download
memory/1616-2-0x0000000002520000-0x0000000002521000-memory.dmp

Filesize
4KB

Download
memory/1616-3-0x0000000002520000-0x0000000002521000-memory.dmp

Filesize
4KB

Download
memory/1616-4-0x0000000002520000-0x0000000002521000-memory.dmp

Filesize
4KB

Download
memory/1616-5-0x0000000002520000-0x0000000002521000-memory.dmp

Filesize
4KB

Download
memory/1616-7-0x0000000000400000-0x0000000000558000-memory.dmp

Filesize
1.3MB

Download
memory/1616-6-0x0000000002530000-0x0000000002531000-memory.dmp

Filesize
4KB

Download
memory/1616-19-0x0000000002520000-0x0000000002521000-memory.dmp

Filesize
4KB

Download
memory/1616-30-0x0000000002510000-0x0000000002511000-memory.dmp

Filesize
4KB

Download
memory/1616-32-0x0000000000400000-0x0000000000558000-memory.dmp

Filesize
1.3MB

Download
memory/1616-29-0x0000000002340000-0x0000000002341000-memory.dmp

Filesize
4KB

Download
memory/1616-28-0x0000000002530000-0x0000000002531000-memory.dmp

Filesize
4KB

Download
memory/1616-27-0x0000000002530000-0x0000000002531000-memory.dmp

Filesize
4KB

Download
memory/1616-26-0x0000000002530000-0x0000000002531000-memory.dmp

Filesize
4KB

Download
memory/1616-25-0x0000000002530000-0x0000000002531000-memory.dmp

Filesize
4KB

Download
memory/1616-24-0x0000000002530000-0x0000000002531000-memory.dmp

Filesize
4KB

Download
memory/1616-23-0x0000000002520000-0x0000000002521000-memory.dmp

Filesize
4KB

Download
memory/1616-22-0x0000000002520000-0x0000000002521000-memory.dmp

Filesize
4KB

Download
memory/1616-21-0x0000000002520000-0x0000000002521000-memory.dmp

Filesize
4KB

Download
memory/1616-20-0x0000000002520000-0x0000000002521000-memory.dmp

Filesize
4KB

Download
memory/1616-18-0x0000000002520000-0x0000000002521000-memory.dmp

Filesize
4KB

Download
memory/1616-17-0x0000000002520000-0x0000000002521000-memory.dmp

Filesize
4KB

Download
memory/1616-16-0x0000000002520000-0x0000000002521000-memory.dmp

Filesize
4KB

Download
memory/1616-15-0x0000000002520000-0x0000000002521000-memory.dmp

Filesize
4KB

Download
memory/1616-13-0x0000000002520000-0x0000000002521000-memory.dmp

Filesize
4KB

Download
memory/1616-12-0x0000000002520000-0x0000000002521000-memory.dmp

Filesize
4KB

Download
memory/1616-11-0x0000000002530000-0x0000000002531000-memory.dmp

Filesize
4KB

Download
memory/1616-10-0x0000000002530000-0x0000000002531000-memory.dmp

Filesize
4KB

Download
memory/1616-9-0x0000000002530000-0x0000000002531000-memory.dmp

Filesize
4KB

Download
memory/1616-8-0x0000000002530000-0x0000000002531000-memory.dmp

Filesize
4KB

Download
memory/1616-33-0x0000000000400000-0x0000000000558000-memory.dmp

Filesize
1.3MB

Download
memory/1616-34-0x00000000022F0000-0x0000000002325000-memory.dmp

Filesize
212KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads