Analysis
-
max time kernel
150s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
09/01/2024, 06:01
Static task
static1
Behavioral task
behavioral1
Sample
4d87c646e38d41c373fea2fb20be3387.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4d87c646e38d41c373fea2fb20be3387.exe
Resource
win10v2004-20231215-en
General
-
Target
4d87c646e38d41c373fea2fb20be3387.exe
-
Size
20KB
-
MD5
4d87c646e38d41c373fea2fb20be3387
-
SHA1
2d7f5e31c792f9cb6c175f4f99d83efa78c8d2e0
-
SHA256
90d21c1f1205e4c66a63fc2819589f398e22b58afa7d6a5950aa5215c902c113
-
SHA512
bbdcd518dc26168feee499e867ab7dad8efbc46d72f8a058642fcdd90829170eac883f1e8a459038d3d6bc4449542f26da736207e933b678e76892fe68b0a429
-
SSDEEP
384:YtsilEkYdk+5o3OIbT1Ku8EzT3+ixnFak0q68MQxFSXSVRq3p6dMTPXKq:AikYdk+5y/8EH+WnsKTkmRqQaTPaq
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 3428 4d87c646e38d41c373fea2fb20be3387.exe -
Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 3428 4d87c646e38d41c373fea2fb20be3387.exe 3428 4d87c646e38d41c373fea2fb20be3387.exe 3428 4d87c646e38d41c373fea2fb20be3387.exe 3428 4d87c646e38d41c373fea2fb20be3387.exe 3428 4d87c646e38d41c373fea2fb20be3387.exe 3428 4d87c646e38d41c373fea2fb20be3387.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3428 4d87c646e38d41c373fea2fb20be3387.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
22KB
MD59181a861e02b6616dbd15d19a43a2ea9
SHA1f5d528d0709c91228bc60e162f748e2a0fc1ac51
SHA2563907a9c56e9d1c3893a239843b8b9203698046f8b75bfbf91c38aff3dd55a1ac
SHA5123a5ebc61c58e63b52c86cb003f82f5dc4d81c07f3047d4c6e8b6c779760d65afdfbfc3514eebdb04e5c2590ad844539081d04d680ff5b16edaa42bd331724f4d