Analysis
-
max time kernel
150s -
max time network
160s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
26/12/2023, 10:16
Static task
static1
Behavioral task
behavioral1
Sample
6695f2de18266f54c3886bff1759ed7a.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6695f2de18266f54c3886bff1759ed7a.exe
Resource
win10v2004-20231215-en
General
-
Target
6695f2de18266f54c3886bff1759ed7a.exe
-
Size
637KB
-
MD5
6695f2de18266f54c3886bff1759ed7a
-
SHA1
b2cdd0e83000c4187cba2a922241269244bce713
-
SHA256
e10ce7f9fa8d5ec37c093de214f4fb29dad75ca23d37bfe86fc009b74718e7b9
-
SHA512
e4bc05ab84447fe2da77de5eda829b462d0e3368dded1412c0a2cb3b54584d4d2c9912ffc7bef440b6229fe9ae0642ae769d27af2ac40c602ff4a85d8375bb97
-
SSDEEP
12288:khurkQ1OnJnehVaeAJBGXaSsEMMUWTmysH9dhiMcdlL+n1RsvEAy77SCUe9xx5L2:khKkQ1CnkmJW5sEMylifsvEBSC3/y
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 3520 6695f2de18266f54c3886bff1759ed7a.exe -
Suspicious use of SetWindowsHookEx 18 IoCs
pid Process 3520 6695f2de18266f54c3886bff1759ed7a.exe 3520 6695f2de18266f54c3886bff1759ed7a.exe 3520 6695f2de18266f54c3886bff1759ed7a.exe 3520 6695f2de18266f54c3886bff1759ed7a.exe 3520 6695f2de18266f54c3886bff1759ed7a.exe 3520 6695f2de18266f54c3886bff1759ed7a.exe 3520 6695f2de18266f54c3886bff1759ed7a.exe 3520 6695f2de18266f54c3886bff1759ed7a.exe 3520 6695f2de18266f54c3886bff1759ed7a.exe 3520 6695f2de18266f54c3886bff1759ed7a.exe 3520 6695f2de18266f54c3886bff1759ed7a.exe 3520 6695f2de18266f54c3886bff1759ed7a.exe 3520 6695f2de18266f54c3886bff1759ed7a.exe 3520 6695f2de18266f54c3886bff1759ed7a.exe 3520 6695f2de18266f54c3886bff1759ed7a.exe 3520 6695f2de18266f54c3886bff1759ed7a.exe 3520 6695f2de18266f54c3886bff1759ed7a.exe 3520 6695f2de18266f54c3886bff1759ed7a.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.1MB
MD5638e737b2293cf7b1f14c0b4fb1f3289
SHA1f8e2223348433b992a8c42c4a7a9fb4b5c1158bc
SHA256baad4798c3ab24dec8f0ac3cde48e2fee2e2dffa60d2b2497cd295cd6319fd5b
SHA5124d714a0980238c49af10376ff26ec9e6415e7057925b32ec1c24780c3671047ac5b5670e46c1c6cf9f160519be8f37e1e57f05c30c6c4bda3b275b143aa0bf12