Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
29/12/2023, 23:51
General
-
Target
0797ffd75becc7abb93890250ddf628a.exe
-
Size
104KB
-
MD5
0797ffd75becc7abb93890250ddf628a
-
SHA1
ecd9c3414e81c0d9ad2c97314882df0930b1c747
-
SHA256
5a84733effda557b885370801bd0d46f573424e2ff7983e3feb385725770755f
-
SHA512
4f15e1c964fbdc734c6f899d73017d66ff11f83f80088add2db087da897902151a8a61042a1f54f01c6bb2343645f853fc4a6b1b07a5f50343172fe7cd249a4a
-
SSDEEP
1536:ZAqlTmQYY46Jkvl0Kqdw/X2INaib+XkbkyaS1pDoyTrH4JmWW7:WkdK95qoGOKXoau8MrHv
Score
7/10
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
-
Drops file in System32 directory 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Windows\SysWOW64\mscccdj32.dllC:\Windows\system32\mscccdj32.dll ebpsbmsdj.dll1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
-
C:\Users\Admin\AppData\Local\Temp\0797ffd75becc7abb93890250ddf628a.exe"C:\Users\Admin\AppData\Local\Temp\0797ffd75becc7abb93890250ddf628a.exe"1⤵
- Drops file in System32 directory
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
116KB
-
Filesize
116KB