c1bb18e74e07e5bd56c750c83711766e3dfb72afff687c76b983882ce8d07c4b | Triage

Analysis

max time kernel
1s
max time network
138s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25/12/2023, 14:57

Sharing

Report Analysis Logs

General

Target

2767602155e319116bad9d5508ed8613.exe
Size

24KB
MD5

2767602155e319116bad9d5508ed8613
SHA1

7a0104dd3260c11ba30b56d83c3d3aa9ba51ec23
SHA256

c1bb18e74e07e5bd56c750c83711766e3dfb72afff687c76b983882ce8d07c4b
SHA512

294ddbad951485eb7890cb8dfe2da6f36d0eca6b2555ed12060d4017e7137c4cd089ca9ed2c2ee4e86d3a7c0c1f5590be7bc4972ada9062f8d579f68b7c467b3
SSDEEP

384:ZufxV2GzUQggc0JlgNHanCWv7Sgu87DW4hrC:8fWl0gNH8CuGg9rM

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1960	2767602155e319116bad9d5508ed8613.exe

C:\Users\Admin\AppData\Local\Temp\2767602155e319116bad9d5508ed8613.exe
"C:\Users\Admin\AppData\Local\Temp\2767602155e319116bad9d5508ed8613.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1960
- C:\Windows\SysWOW64\explorer.exe
  explorer http://www.pkcchurch.org/images/diabolick/ownz/playboy.htm
  2⤵
  PID:3056

C:\Windows\explorer.exe
C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding
1⤵
PID:1200
- C:\Program Files\Internet Explorer\iexplore.exe
  "C:\Program Files\Internet Explorer\iexplore.exe" http://www.pkcchurch.org/images/diabolick/ownz/playboy.htm
  2⤵
  PID:1568

C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1568 CREDAT:275457 /prefetch:2
1⤵
PID:1196

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads