Analysis

  • max time kernel
    150s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    05/01/2024, 18:08

General

  • Target

    441743c5cacc5d2196cf237b74e44fde.exe

  • Size

    195KB

  • MD5

    441743c5cacc5d2196cf237b74e44fde

  • SHA1

    a349b0aaa775f20cb03954ccc3b469245f46f902

  • SHA256

    8f753ee0fa6d5493ef7d2ace67c60f605ef5b3d940a69eeb8921206f07dd759e

  • SHA512

    4037ec441e3295e0568bce20e36f1b3012b851b78c4553a8e873f9670e306f952ebbef3aec8af03ef3b1b4486f2d238a601169df022b279b170ebee3ef612160

  • SSDEEP

    6144:6FG27XQ4LSg8D8clK5T/xqbVqKwO98kx:6F1A4ugd7DxqbXwhW

Score
6/10

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
  • Drops file in Windows directory 2 IoCs
  • Modifies Internet Explorer settings 1 TTPs 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\441743c5cacc5d2196cf237b74e44fde.exe
    "C:\Users\Admin\AppData\Local\Temp\441743c5cacc5d2196cf237b74e44fde.exe"
    1⤵
    • Adds Run key to start application
    • Drops file in Windows directory
    • Modifies Internet Explorer settings
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2272

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2272-0-0x0000000000320000-0x000000000032A000-memory.dmp

    Filesize

    40KB

  • memory/2272-1-0x0000000000400000-0x0000000000444000-memory.dmp

    Filesize

    272KB

  • memory/2272-22033-0x0000000000400000-0x0000000000444000-memory.dmp

    Filesize

    272KB

  • memory/2272-34553-0x0000000000400000-0x0000000000444000-memory.dmp

    Filesize

    272KB

  • memory/2272-34554-0x0000000072790000-0x00000000737F2000-memory.dmp

    Filesize

    16.4MB

  • memory/2272-34555-0x0000000072790000-0x00000000737F2000-memory.dmp

    Filesize

    16.4MB

  • memory/2272-34557-0x0000000000400000-0x0000000000444000-memory.dmp

    Filesize

    272KB

  • memory/2272-34559-0x0000000000400000-0x0000000000444000-memory.dmp

    Filesize

    272KB

  • memory/2272-34560-0x0000000000400000-0x0000000000444000-memory.dmp

    Filesize

    272KB