b79386a0336cb8e16eb098ebd7173edbcd105ed098208bae697221965bb57f7a

Analysis

max time kernel
122s
max time network
128s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
04/01/2024, 02:09

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3fa166ccff0b0c57154bfac0d7778f55.exe
Size

927KB
MD5

3fa166ccff0b0c57154bfac0d7778f55
SHA1

88d66a500d6e63bba5a7e6cd4830f4716354bb1b
SHA256

b79386a0336cb8e16eb098ebd7173edbcd105ed098208bae697221965bb57f7a
SHA512

d0e72a3f4eeabc4a50dd47a35cef0770cc1de3b6c48f5cde2ba57caf0bdaeebd71be32a79e94eb37e1d57965483a84ede4795118c9dca5d8e2f49d77070c2452
SSDEEP

24576:X5wcDOMhpblgqYmRBNKzcn/wbInUA/eATKxBNcCIEttTpBfBL:XOOOEpbigM4nwu27Nw+tdzL

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
2360	3fa166ccff0b0c57154bfac0d7778f55.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2360	3fa166ccff0b0c57154bfac0d7778f55.exe

Suspicious use of WriteProcessMemory 20 IoCs

description	pid	Process	procid_target
PID 2360 wrote to memory of 2780	2360	3fa166ccff0b0c57154bfac0d7778f55.exe	28
PID 2360 wrote to memory of 2780	2360	3fa166ccff0b0c57154bfac0d7778f55.exe	28
PID 2360 wrote to memory of 2780	2360	3fa166ccff0b0c57154bfac0d7778f55.exe	28
PID 2360 wrote to memory of 2780	2360	3fa166ccff0b0c57154bfac0d7778f55.exe	28
PID 2360 wrote to memory of 2780	2360	3fa166ccff0b0c57154bfac0d7778f55.exe	28
PID 2360 wrote to memory of 2780	2360	3fa166ccff0b0c57154bfac0d7778f55.exe	28
PID 2360 wrote to memory of 2780	2360	3fa166ccff0b0c57154bfac0d7778f55.exe	28
PID 2360 wrote to memory of 2780	2360	3fa166ccff0b0c57154bfac0d7778f55.exe	28
PID 2360 wrote to memory of 2780	2360	3fa166ccff0b0c57154bfac0d7778f55.exe	28
PID 2360 wrote to memory of 2780	2360	3fa166ccff0b0c57154bfac0d7778f55.exe	28
PID 2360 wrote to memory of 2780	2360	3fa166ccff0b0c57154bfac0d7778f55.exe	28
PID 2360 wrote to memory of 2780	2360	3fa166ccff0b0c57154bfac0d7778f55.exe	28
PID 2360 wrote to memory of 2780	2360	3fa166ccff0b0c57154bfac0d7778f55.exe	28
PID 2360 wrote to memory of 2780	2360	3fa166ccff0b0c57154bfac0d7778f55.exe	28
PID 2360 wrote to memory of 2780	2360	3fa166ccff0b0c57154bfac0d7778f55.exe	28
PID 2360 wrote to memory of 2780	2360	3fa166ccff0b0c57154bfac0d7778f55.exe	28
PID 2360 wrote to memory of 2780	2360	3fa166ccff0b0c57154bfac0d7778f55.exe	28
PID 2360 wrote to memory of 2780	2360	3fa166ccff0b0c57154bfac0d7778f55.exe	28
PID 2360 wrote to memory of 2780	2360	3fa166ccff0b0c57154bfac0d7778f55.exe	28
PID 2360 wrote to memory of 2780	2360	3fa166ccff0b0c57154bfac0d7778f55.exe	28

C:\Users\Admin\AppData\Local\Temp\3fa166ccff0b0c57154bfac0d7778f55.exe
"C:\Users\Admin\AppData\Local\Temp\3fa166ccff0b0c57154bfac0d7778f55.exe"
1⤵
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2360
- C:\Users\Admin\AppData\Local\Temp\3fa166ccff0b0c57154bfac0d7778f55.exe
  "C:\Users\Admin\AppData\Local\Temp\3fa166ccff0b0c57154bfac0d7778f55.exe"
  2⤵
  PID:2780

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

\Users\Admin\AppData\Local\.#\MBX@938@1E41C38.###

Filesize
2KB

MD5
48f648cb68fc5dc7d54db53889fd68d6

SHA1
2202fef10a3b3fef4217cb30e530d66c7549a569

SHA256
088e390ab6da0d73978798e68448a4309d599b1d031c3c2c0dc7867e20499468

SHA512
f9572b0b5b4ade7f653ffcd2187ec41828ea0e290bbcb5266b1458e9a9007515d6f1a47ee90b6d972076b938f208708d8298db5826d14c83b045836546ef8e80

Download Submit
memory/2360-8-0x0000000073390000-0x00000000734E4000-memory.dmp

Filesize
1.3MB

Download
memory/2360-6-0x0000000073390000-0x00000000734E4000-memory.dmp

Filesize
1.3MB

Download
memory/2360-1-0x0000000000400000-0x0000000000465000-memory.dmp

Filesize
404KB

Download
memory/2360-9-0x0000000073390000-0x00000000734E4000-memory.dmp

Filesize
1.3MB

Download
memory/2360-10-0x0000000073390000-0x00000000734E4000-memory.dmp

Filesize
1.3MB

Download
memory/2360-0-0x0000000000400000-0x0000000000465000-memory.dmp

Filesize
404KB

Download
memory/2360-7-0x0000000073390000-0x00000000734E4000-memory.dmp

Filesize
1.3MB

Download
memory/2360-2-0x0000000000400000-0x0000000000465000-memory.dmp

Filesize
404KB

Download
memory/2360-13-0x0000000000400000-0x0000000000465000-memory.dmp

Filesize
404KB

Download
memory/2360-16-0x0000000000470000-0x00000000004D5000-memory.dmp

Filesize
404KB

Download
memory/2360-17-0x0000000073390000-0x00000000734E4000-memory.dmp

Filesize
1.3MB

Download
memory/2360-14-0x0000000000400000-0x0000000000465000-memory.dmp

Filesize
404KB

Download
memory/2780-15-0x0000000000400000-0x0000000000465000-memory.dmp

Filesize
404KB

Download
memory/2780-18-0x0000000000400000-0x0000000000465000-memory.dmp

Filesize
404KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads