Analysis

  • max time kernel
    0s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 21:22

General

  • Target

    3b15444884435d7d98b53443ca2baa7d.exe

  • Size

    76KB

  • MD5

    3b15444884435d7d98b53443ca2baa7d

  • SHA1

    00b5b7c0362d10f74ba465369897e7aa6bea6367

  • SHA256

    071f3e04099027dc007c8bec0526e3dd0a79f4a58ea054cd19ea3779f91655e1

  • SHA512

    4da806fdf3d85d9861e62994f1448cd00523e58abf39da531d8da3e0124969967e78a384501e6f6669ac844d487ec510106c1f721b50a52e744ba29c19b7fbe6

  • SSDEEP

    1536:pzXii62r3l/XU9nD5BOBtkR6NYq8DtlEAAW0C9BAyIfBBtClR9evsFiw:pzXix2r1XUd5kUR6NxstlEAn0CEyV9eu

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3b15444884435d7d98b53443ca2baa7d.exe
    "C:\Users\Admin\AppData\Local\Temp\3b15444884435d7d98b53443ca2baa7d.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1392
  • C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE
    "C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE" -Embedding
    1⤵
      PID:2144

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Windows\SendTo.exe

      Filesize

      76KB

      MD5

      3b15444884435d7d98b53443ca2baa7d

      SHA1

      00b5b7c0362d10f74ba465369897e7aa6bea6367

      SHA256

      071f3e04099027dc007c8bec0526e3dd0a79f4a58ea054cd19ea3779f91655e1

      SHA512

      4da806fdf3d85d9861e62994f1448cd00523e58abf39da531d8da3e0124969967e78a384501e6f6669ac844d487ec510106c1f721b50a52e744ba29c19b7fbe6

    • memory/1392-0-0x0000000000400000-0x0000000000414000-memory.dmp

      Filesize

      80KB

    • memory/2144-3-0x000000005FFF0000-0x0000000060000000-memory.dmp

      Filesize

      64KB

    • memory/2144-4-0x0000000073BED000-0x0000000073BF8000-memory.dmp

      Filesize

      44KB

    • memory/2144-100-0x000000006CE91000-0x000000006CE92000-memory.dmp

      Filesize

      4KB

    • memory/2144-115-0x0000000073BED000-0x0000000073BF8000-memory.dmp

      Filesize

      44KB