Analysis

  • max time kernel
    0s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 22:42

General

  • Target

    1ecc46627bd2588dbd1d53f976d1e1c9.exe

  • Size

    1.3MB

  • MD5

    1ecc46627bd2588dbd1d53f976d1e1c9

  • SHA1

    d4db69e9f1f4589796b7b6f4720c925522247c37

  • SHA256

    e40b39353e2d9fb8de6ddd7214707c50a13085a667630e33119bcd9d9209a7f3

  • SHA512

    aff46dcf38f356584adc0d4762d5d59584b1e865e8d99bf5d2db3d6bcb65f77ac60c57cadebce22b8bcf360bf1b13f8ff2a46d3355e44bab9ca37d84fd84c15b

  • SSDEEP

    24576:dnj/lU4FO60Vx3rrB58K970y5z+qbDy8zoE6vxOhXodSOkwsax:dn3yx3rbH97vz+q1Q5OSn0ax

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1ecc46627bd2588dbd1d53f976d1e1c9.exe
    "C:\Users\Admin\AppData\Local\Temp\1ecc46627bd2588dbd1d53f976d1e1c9.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1236

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1236-0-0x0000000000400000-0x00000000008A321B-memory.dmp

          Filesize

          4.6MB

        • memory/1236-1-0x0000000000400000-0x00000000008A321B-memory.dmp

          Filesize

          4.6MB

        • memory/1236-2-0x0000000000230000-0x0000000000231000-memory.dmp

          Filesize

          4KB

        • memory/1236-7-0x0000000005D20000-0x0000000005D21000-memory.dmp

          Filesize

          4KB

        • memory/1236-6-0x00000000059E0000-0x00000000059E1000-memory.dmp

          Filesize

          4KB

        • memory/1236-5-0x0000000005730000-0x0000000005731000-memory.dmp

          Filesize

          4KB

        • memory/1236-4-0x0000000005890000-0x0000000005891000-memory.dmp

          Filesize

          4KB

        • memory/1236-3-0x0000000005740000-0x0000000005741000-memory.dmp

          Filesize

          4KB

        • memory/1236-96-0x0000000000400000-0x00000000008A321B-memory.dmp

          Filesize

          4.6MB