Analysis
-
max time kernel
159s -
max time network
172s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
29/12/2023, 21:56
Static task
static1
Behavioral task
behavioral1
Sample
04f423667f2d8e78ee335d6c53ffba7c.exe
Resource
win7-20231215-en
windows7-x64
Behavioral task
behavioral2
Sample
04f423667f2d8e78ee335d6c53ffba7c.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
General
-
Target
04f423667f2d8e78ee335d6c53ffba7c.exe
-
Size
3.3MB
-
MD5
04f423667f2d8e78ee335d6c53ffba7c
-
SHA1
3d180d58922594950b04f4338bc0463829d33498
-
SHA256
e24bebde9118b4dca4eeeab98d0a76bd250d2ec23d72667aa4d47ef049397f9d
-
SHA512
9243f64390d93c0be5e61ed345cf9643b56a5b1040d6c068d44f9674dac7702bb05f309cdaf04c715f2b59949f22a5f86a99c280c112dc48bd40373b1761c9f1
-
SSDEEP
98304:g+yVTStFH7feSgq5xYCrFuNSTFQ6RScnE8xjrG5IdNlHjl/e:gFSrxZ5HTFQ6btxWYlDl/
Malware Config
Signatures
-
Loads dropped DLL 7 IoCs
pid Process 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe -
Suspicious use of SetWindowsHookEx 23 IoCs
pid Process 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe 752 04f423667f2d8e78ee335d6c53ffba7c.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
212KB
MD54c9e8f81bf741a61915d0d4fc49d595e
SHA1d033008b3a0e5d3fc8876e0423ee5509ecb3897c
SHA256951d725f4a12cd4ff713ca147fa3be08a02367db6731283c3f1ba30445990129
SHA512cf2c6f8f471c8a5aad563bc257035515860689b73ce343599c7713de8bc8338a031a722f366e005bc1907d6fc97b68b8b415e8ff05b7324fb1040c5dc02315d7
-
Filesize
216KB
MD5cba933625bfa502fc4a1d9f34e1e4473
SHA15319194388c0e53321f99f1541b97af191999a09
SHA25625549c7781b3f1b92e73b0ea721d177207cce914a66f3229a71291f2eb160013
SHA512f5fb4b97c4f68a20e0847e6528740ce659c4501726f3b2dff1ac83e88a3b7198099da03edb0f069cd4af7ed568a2373597b235cd239895addfa5226d3a444142
-
Filesize
192KB
MD50503d44bada9a0c7138b3f7d3ab90693
SHA1c4ea03151eeedd1c84beaa06e73faa9c1e9574fc
SHA2567c077b6806738e62a9c2e38cc2ffefefd362049e3780b06a862210f1350d003e
SHA512f14dfa273b514753312e1dfc873ac501d6aa7bbd17cd63d16f3bcb9caddcb5ea349c072e73448a2beb3b1010c674be9c8ad22257d8c7b65a3a05e77e69d3b7a8
-
Filesize
48KB
MD537a58e1c5ce48e401ee8dd1d1da54814
SHA1a87d00d78838c2d968b72330ee6f21f69b2caae5
SHA2561c426928fb90bedb31fcffa0f3fbe7bdbca4259f93f5abdefed6a9a089f2982c
SHA512e85052fc305040bdcaf47262e0ce6eef0848b319baac72a076dc94e7d20ea7ad8fbdd7d5381606a3154ab84fe81429bb339123ac1cd94551b1dc9cecfb7a08bf