8981d1cebb83d756c7d87b02cf3e50a99d2d9174c98b6fa151bb446b64b69dab

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26/12/2023, 16:32

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7cea6b709fe3de401d58475da420bbe7.exe
Size

172KB
MD5

7cea6b709fe3de401d58475da420bbe7
SHA1

852fa70b08d52e5248ca3e347a74624e51f15986
SHA256

8981d1cebb83d756c7d87b02cf3e50a99d2d9174c98b6fa151bb446b64b69dab
SHA512

e10523609d4b0db250d752184fb670e5404abea7efd56122605292f4321d0b87e0f26b5daa63dfea421014da6f662b5b9d60c917d7741ce439ace1c067aa8f5e
SSDEEP

3072:7Bj0VVESD78ZOKh6DbFRKd60uI/jMQ2nJ3EESDo:7BS9X+QXfKz9/jTpt8

Score

5^/10

Malware Config

Signatures

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2460 set thread context of 2676	2460	7cea6b709fe3de401d58475da420bbe7.exe	28

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
2676	7cea6b709fe3de401d58475da420bbe7.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2460	7cea6b709fe3de401d58475da420bbe7.exe

Suspicious use of WriteProcessMemory 14 IoCs

description	pid	Process	procid_target
PID 2460 wrote to memory of 2676	2460	7cea6b709fe3de401d58475da420bbe7.exe	28
PID 2460 wrote to memory of 2676	2460	7cea6b709fe3de401d58475da420bbe7.exe	28
PID 2460 wrote to memory of 2676	2460	7cea6b709fe3de401d58475da420bbe7.exe	28
PID 2460 wrote to memory of 2676	2460	7cea6b709fe3de401d58475da420bbe7.exe	28
PID 2460 wrote to memory of 2676	2460	7cea6b709fe3de401d58475da420bbe7.exe	28
PID 2460 wrote to memory of 2676	2460	7cea6b709fe3de401d58475da420bbe7.exe	28
PID 2460 wrote to memory of 2676	2460	7cea6b709fe3de401d58475da420bbe7.exe	28
PID 2460 wrote to memory of 2676	2460	7cea6b709fe3de401d58475da420bbe7.exe	28
PID 2460 wrote to memory of 2676	2460	7cea6b709fe3de401d58475da420bbe7.exe	28
PID 2676 wrote to memory of 1184	2676	7cea6b709fe3de401d58475da420bbe7.exe	16
PID 2676 wrote to memory of 1184	2676	7cea6b709fe3de401d58475da420bbe7.exe	16
PID 2676 wrote to memory of 1184	2676	7cea6b709fe3de401d58475da420bbe7.exe	16
PID 2676 wrote to memory of 1184	2676	7cea6b709fe3de401d58475da420bbe7.exe	16
PID 2676 wrote to memory of 1184	2676	7cea6b709fe3de401d58475da420bbe7.exe	16

C:\Windows\Explorer.EXE
C:\Windows\Explorer.EXE
1⤵
PID:1184
- C:\Users\Admin\AppData\Local\Temp\7cea6b709fe3de401d58475da420bbe7.exe
  "C:\Users\Admin\AppData\Local\Temp\7cea6b709fe3de401d58475da420bbe7.exe"
  2⤵
  - Suspicious use of SetThreadContext
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:2460
- - C:\Users\Admin\AppData\Local\Temp\7cea6b709fe3de401d58475da420bbe7.exe
    C:\Users\Admin\AppData\Local\Temp\7cea6b709fe3de401d58475da420bbe7.exe
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of WriteProcessMemory
    PID:2676

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2460-12-0x00000000003E0000-0x00000000003F0000-memory.dmp

Filesize
64KB

Download
memory/2460-11-0x00000000003D0000-0x00000000003E0000-memory.dmp

Filesize
64KB

Download
memory/2460-10-0x00000000003C0000-0x00000000003D0000-memory.dmp

Filesize
64KB

Download
memory/2460-9-0x00000000003B0000-0x00000000003C0000-memory.dmp

Filesize
64KB

Download
memory/2460-8-0x00000000003A0000-0x00000000003B0000-memory.dmp

Filesize
64KB

Download
memory/2460-7-0x0000000000390000-0x00000000003A0000-memory.dmp

Filesize
64KB

Download
memory/2460-6-0x0000000000300000-0x0000000000310000-memory.dmp

Filesize
64KB

Download
memory/2460-5-0x00000000002F0000-0x0000000000300000-memory.dmp

Filesize
64KB

Download
memory/2460-4-0x00000000002E0000-0x00000000002F0000-memory.dmp

Filesize
64KB

Download
memory/2460-3-0x0000000000290000-0x00000000002A0000-memory.dmp

Filesize
64KB

Download
memory/2460-2-0x0000000000280000-0x0000000000290000-memory.dmp

Filesize
64KB

Download
memory/2460-1-0x0000000000270000-0x0000000000280000-memory.dmp

Filesize
64KB

Download
memory/2460-0-0x0000000000220000-0x0000000000230000-memory.dmp

Filesize
64KB

Download
memory/2460-13-0x00000000003F0000-0x0000000000400000-memory.dmp

Filesize
64KB

Download
memory/2460-14-0x0000000000430000-0x0000000000440000-memory.dmp

Filesize
64KB

Download
memory/2460-15-0x0000000000440000-0x0000000000450000-memory.dmp

Filesize
64KB

Download
memory/2460-16-0x0000000000450000-0x0000000000460000-memory.dmp

Filesize
64KB

Download
memory/2460-17-0x0000000000460000-0x0000000000470000-memory.dmp

Filesize
64KB

Download
memory/2460-18-0x0000000000470000-0x0000000000480000-memory.dmp

Filesize
64KB

Download
memory/2460-19-0x0000000000480000-0x0000000000490000-memory.dmp

Filesize
64KB

Download
memory/2460-20-0x0000000000490000-0x00000000004A0000-memory.dmp

Filesize
64KB

Download
memory/2460-21-0x00000000004A0000-0x00000000004B0000-memory.dmp

Filesize
64KB

Download
memory/2460-22-0x00000000004F0000-0x0000000000500000-memory.dmp

Filesize
64KB

Download
memory/2460-23-0x0000000000500000-0x0000000000510000-memory.dmp

Filesize
64KB

Download
memory/2460-24-0x0000000000510000-0x0000000000520000-memory.dmp

Filesize
64KB

Download
memory/2460-25-0x0000000000520000-0x0000000000530000-memory.dmp

Filesize
64KB

Download
memory/2460-26-0x0000000000530000-0x0000000000540000-memory.dmp

Filesize
64KB

Download
memory/2460-27-0x0000000000540000-0x0000000000550000-memory.dmp

Filesize
64KB

Download
memory/2460-28-0x0000000000550000-0x0000000000560000-memory.dmp

Filesize
64KB

Download
memory/2460-29-0x0000000000560000-0x0000000000570000-memory.dmp

Filesize
64KB

Download
memory/2460-30-0x0000000000580000-0x0000000000590000-memory.dmp

Filesize
64KB

Download
memory/2460-31-0x0000000001E90000-0x0000000001EA0000-memory.dmp

Filesize
64KB

Download
memory/2460-32-0x0000000001EA0000-0x0000000001EB0000-memory.dmp

Filesize
64KB

Download
memory/2460-33-0x0000000001EB0000-0x0000000001EC0000-memory.dmp

Filesize
64KB

Download
memory/2460-34-0x0000000001EC0000-0x0000000001ED0000-memory.dmp

Filesize
64KB

Download
memory/2460-35-0x0000000001ED0000-0x0000000001EE0000-memory.dmp

Filesize
64KB

Download
memory/2460-36-0x0000000001EE0000-0x0000000001EF0000-memory.dmp

Filesize
64KB

Download
memory/2460-37-0x0000000001EF0000-0x0000000001F00000-memory.dmp

Filesize
64KB

Download
memory/2460-38-0x0000000001F00000-0x0000000001F10000-memory.dmp

Filesize
64KB

Download
memory/2460-39-0x0000000001F10000-0x0000000001F20000-memory.dmp

Filesize
64KB

Download
memory/2460-40-0x0000000001F20000-0x0000000001F30000-memory.dmp

Filesize
64KB

Download
memory/2460-41-0x0000000001F30000-0x0000000001F40000-memory.dmp

Filesize
64KB

Download
memory/2460-42-0x0000000001F40000-0x0000000001F50000-memory.dmp

Filesize
64KB

Download
memory/2460-43-0x0000000001F50000-0x0000000001F60000-memory.dmp

Filesize
64KB

Download
memory/2460-44-0x0000000001F60000-0x0000000001F70000-memory.dmp

Filesize
64KB

Download
memory/2460-45-0x0000000002750000-0x0000000002760000-memory.dmp

Filesize
64KB

Download
memory/2460-46-0x0000000002760000-0x0000000002770000-memory.dmp

Filesize
64KB

Download
memory/2460-47-0x0000000002770000-0x0000000002780000-memory.dmp

Filesize
64KB

Download
memory/2460-48-0x0000000002780000-0x0000000002790000-memory.dmp

Filesize
64KB

Download
memory/2460-49-0x0000000002790000-0x00000000027A0000-memory.dmp

Filesize
64KB

Download
memory/2460-50-0x00000000027A0000-0x00000000027B0000-memory.dmp

Filesize
64KB

Download
memory/2460-51-0x00000000027B0000-0x00000000027C0000-memory.dmp

Filesize
64KB

Download
memory/2460-52-0x00000000027C0000-0x00000000027D0000-memory.dmp

Filesize
64KB

Download
memory/2460-53-0x00000000027D0000-0x00000000027E0000-memory.dmp

Filesize
64KB

Download
memory/2676-56-0x0000000000400000-0x000000000041E000-memory.dmp

Filesize
120KB

Download
memory/2676-58-0x0000000000400000-0x000000000041E000-memory.dmp

Filesize
120KB

Download
memory/2676-59-0x0000000000400000-0x000000000041E000-memory.dmp

Filesize
120KB

Download
memory/2676-60-0x0000000000400000-0x000000000041E000-memory.dmp

Filesize
120KB

Download