Analysis

  • max time kernel
    140s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 05:50

General

  • Target

    10664cf319ab4dd05e4c4cd7e18f72e4.exe

  • Size

    21KB

  • MD5

    10664cf319ab4dd05e4c4cd7e18f72e4

  • SHA1

    943b3d076fa3cf4ca34121b6d1ed98a6870265f6

  • SHA256

    90bb988f71beea55327a107c567f740ab41144d149b433f800c9e88c29db8dc7

  • SHA512

    ba6c82c3ff40f71417f6021a06cdbeb22259ddf70c64c20eb2423cec76fc1e3ab06393c3af62bd72887364e01790064ef6367412acf395769a9857afedd54851

  • SSDEEP

    384:IFgoxqABEu+mkHgXldzGaf3cKK3hUeFcUZNRMIUUueTXTZ:xuELJgVEazYGIU1eTV

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Drops file in System32 directory 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\10664cf319ab4dd05e4c4cd7e18f72e4.exe
    "C:\Users\Admin\AppData\Local\Temp\10664cf319ab4dd05e4c4cd7e18f72e4.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in System32 directory
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1644

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1644-4-0x00000000001B0000-0x00000000001BE000-memory.dmp

          Filesize

          56KB

        • memory/1644-2-0x0000000000400000-0x0000000000423000-memory.dmp

          Filesize

          140KB

        • memory/1644-6-0x00000000001B0000-0x00000000001BE000-memory.dmp

          Filesize

          56KB

        • memory/1644-8-0x0000000000400000-0x0000000000423000-memory.dmp

          Filesize

          140KB