Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
01-01-2024 18:36
General
-
Target
3d947a4ead01dd39341d5a02581589be.exe
-
Size
1.1MB
-
MD5
3d947a4ead01dd39341d5a02581589be
-
SHA1
8bbf76723e2ff9e488ec1ca69b42c0896ffceb4d
-
SHA256
dc89cf1adcce520c8c6042b1f5e5cb7abb9d90f9787a45f6cad25dbd2de153df
-
SHA512
1a4ac9a24d5944b9c5cbd417bbab15f27e547d18566c5aa0bb7d085905ac78cc4280225c7fb7f8f61ccd03f610eca7cc253cd45fb48bd9cfe66b10058c6583a9
-
SSDEEP
24576:+hr8CTOnUwGQqlEkWUGun4RGvyzh0MkicYgK2jwKvvOIleAGTdswzC:+hr8COnd9Ap+svYlsvxe0wzC
Malware Config
Signatures
-
Loads dropped DLL 4 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies Internet Explorer settings 1 TTPs 3 IoCs
-
Suspicious use of SetWindowsHookEx 21 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3d947a4ead01dd39341d5a02581589be.exe"C:\Users\Admin\AppData\Local\Temp\3d947a4ead01dd39341d5a02581589be.exe"1⤵
- Loads dropped DLL
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
37KB
MD5a940339893859b9e2125ba2abd945b21
SHA1a07e30c01c25e832e0a7d36a4c53ca91876c8793
SHA256b9d1d02787bc0626616aa6c1a3bf6d6c5ea2563ac1c5cd90a3b81f2d54c044af
SHA51227d4e6c7f58181e6982c2e85733e91ee5957cc6ecddf4dc20c96022554672793cfb2e18608fcce36b6d3692966a1f7f65978f8a160775bb915cff319b7bee52f
-
Filesize
460KB
MD56eb20bb6cafd6d31e871ed3abd65a59c
SHA1ae6495ea4241bcde20e415f2940313785a4a10d2
SHA2562b3fe250f07229eaa58d1bc0c4ac103ba69ad622c27410151ce1d6d46a174bae
SHA512562edc1f058bc280333a6659fceb5a51b3a40bea7aca87db09b0cc1ca1966f26f2a7e4760b944e2502e20257544f85cf9c32f583f1dec06271a35dcfb8fa90f4
-
Filesize
1.1MB
MD5638e737b2293cf7b1f14c0b4fb1f3289
SHA1f8e2223348433b992a8c42c4a7a9fb4b5c1158bc
SHA256baad4798c3ab24dec8f0ac3cde48e2fee2e2dffa60d2b2497cd295cd6319fd5b
SHA5124d714a0980238c49af10376ff26ec9e6415e7057925b32ec1c24780c3671047ac5b5670e46c1c6cf9f160519be8f37e1e57f05c30c6c4bda3b275b143aa0bf12
-
Filesize
48KB
MD537a58e1c5ce48e401ee8dd1d1da54814
SHA1a87d00d78838c2d968b72330ee6f21f69b2caae5
SHA2561c426928fb90bedb31fcffa0f3fbe7bdbca4259f93f5abdefed6a9a089f2982c
SHA512e85052fc305040bdcaf47262e0ce6eef0848b319baac72a076dc94e7d20ea7ad8fbdd7d5381606a3154ab84fe81429bb339123ac1cd94551b1dc9cecfb7a08bf
-
Filesize
140KB
-
Filesize
224KB
-
Filesize
524KB
-
Filesize
52KB
-
Filesize
140KB