Analysis
-
max time kernel
140s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
10/01/2024, 20:47
Static task
static1
Behavioral task
behavioral1
Sample
51948ff549e2ac216e80a02b5e0dc3b5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
51948ff549e2ac216e80a02b5e0dc3b5.exe
Resource
win10v2004-20231215-en
General
-
Target
51948ff549e2ac216e80a02b5e0dc3b5.exe
-
Size
20KB
-
MD5
51948ff549e2ac216e80a02b5e0dc3b5
-
SHA1
e0f02246eda54dc76135bd2bd548309e5a312094
-
SHA256
5e12f4df428d76818ebec04d7083af072aaee5fc9e700927f3d9a90f60f8acf7
-
SHA512
4c8760eb9ab6221b738df077f61fcb1bd893b5d0e89470fce64ad8d1e602f9f899f978426ae4cec6f83d0ebd4379d021881aac68ef406973f4cad4243c5c74b7
-
SSDEEP
384:E9silEV9jb4uFBl1IRcVOJHm4j+KRRJ3pyFpiOLJb:kirb4uFn1IOy5+KRPmpiOLJb
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2692 51948ff549e2ac216e80a02b5e0dc3b5.exe -
Suspicious behavior: EnumeratesProcesses 3 IoCs
pid Process 2692 51948ff549e2ac216e80a02b5e0dc3b5.exe 2692 51948ff549e2ac216e80a02b5e0dc3b5.exe 2692 51948ff549e2ac216e80a02b5e0dc3b5.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2692 51948ff549e2ac216e80a02b5e0dc3b5.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
22KB
MD5930a57ca5cd1d2c159c2bbadc3a61cb6
SHA16acaecfd415778136e8fc5f5ca407adcb61724f1
SHA2560ea320c2f4290ad6a74a7e7a428886d18e698dc4d0d9ac829405108a1e2e5623
SHA512ac8290b0f249cd7bd5c0e0aad01b54a240f6e67f9c4971a6401f6e4a54f9a6e98ac8fef178ac3c13deacd482577a3b97dfca0044bb4fb484da502eb1075e09b7