Analysis

  • max time kernel
    146s
  • max time network
    129s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/12/2023, 22:12

General

  • Target

    1e171d1f61975ce40623aa9bd148f725.exe

  • Size

    68KB

  • MD5

    1e171d1f61975ce40623aa9bd148f725

  • SHA1

    93829f5ec449a1936ce61cc802b920843a8b6d38

  • SHA256

    85e752f439dedd7fe13c61be143955525a27ada9cf6bd89d67c0f33400eb5c86

  • SHA512

    c179b2006b0029e8fbecf74d2ffc7090a880ccc03bd53bc204df4d5bfb5ceefe04401b769132a51762f3d50a8b21efe047c9c4f6689a5808ee1ffcca747725a1

  • SSDEEP

    768:MeugseulKeu/Zq0tcitnb6XU9Ugucb3fIfCW2b9UgucCtnb6XjtcKeu/ZqveulUP:ZZfciZbuabvQ2iaCZbGcEZ

Score
8/10

Malware Config

Signatures

  • Drops file in Drivers directory 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1e171d1f61975ce40623aa9bd148f725.exe
    "C:\Users\Admin\AppData\Local\Temp\1e171d1f61975ce40623aa9bd148f725.exe"
    1⤵
    • Drops file in Drivers directory
    • Suspicious use of SetWindowsHookEx
    PID:4644

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Windows\System32\drivers\etc\services.exe

          Filesize

          1KB

          MD5

          6d03b93fd1cf51629039a4c7dbb4255b

          SHA1

          6ce6d00224b906eebd47414b1a18cde0f811b844

          SHA256

          0e1340bcaf332c804b06ab5ba19433a8db1c7d1aa2ab0cea6d453d36cd2f0dd7

          SHA512

          1cca95f6fc585a27de47d914aa62e6742740a98f2f2d75e39dc10beec6e66bbb4704c5e97421cbf25a498f9f898d50e061e18f600efbd2b62d74d30e2d9386a3