Analysis

  • max time kernel
    148s
  • max time network
    136s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/12/2023, 10:41

General

  • Target

    163a51ad2b82610af79b67558ed14d22.exe

  • Size

    378KB

  • MD5

    163a51ad2b82610af79b67558ed14d22

  • SHA1

    7b93f87ea58f6e157d6f1b419cc7f996f8f6a79f

  • SHA256

    112d9e705993a53a6adacfc27f3d5b0632402a88d5cf62349af485cdd87457f1

  • SHA512

    91f992c9e4868836f4d535c390bbc95c5d005c22d4cb0c5a4bcce8a93bbbf72ffc8a65692efdfaf073860c16166692a90c18868ad8f25e96e7d0adc74f14b5d2

  • SSDEEP

    6144:AE4rnpKEZMjFe//K9ffAUJ7zGrdP5PgQh/8c/QnMkkQ:kprwe//wZKrdP5PxhsMkf

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\163a51ad2b82610af79b67558ed14d22.exe
    "C:\Users\Admin\AppData\Local\Temp\163a51ad2b82610af79b67558ed14d22.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of SetWindowsHookEx
    PID:2828

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2828-0-0x0000000001000000-0x0000000001096000-memory.dmp

    Filesize

    600KB

  • memory/2828-8-0x0000000000A20000-0x0000000000A93000-memory.dmp

    Filesize

    460KB

  • memory/2828-10-0x0000000001000000-0x0000000001096000-memory.dmp

    Filesize

    600KB

  • memory/2828-9-0x0000000000A20000-0x0000000000A93000-memory.dmp

    Filesize

    460KB

  • memory/2828-7-0x0000000000A20000-0x0000000000A93000-memory.dmp

    Filesize

    460KB