Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    12/01/2024, 22:53

General

  • Target

    17520bc71a4e920a15bc2b34059cfbef182b8984f13dad009b29f5dc3e6afadb.exe

  • Size

    8.5MB

  • MD5

    cfa85d9a85f1f8208b126ee3b063453b

  • SHA1

    4db9e1c8a5e98added5942d2f391d62cfa6e3442

  • SHA256

    17520bc71a4e920a15bc2b34059cfbef182b8984f13dad009b29f5dc3e6afadb

  • SHA512

    6a2d7e4fde64f53a46d70fd620508e91708c9aacc05faa52b9c115c5a95793aed5d3aa036856d19dee8f50467aaa3d536bc1166c56f4e4b2aeb9d03128f2372a

  • SSDEEP

    196608:LBSXXmCuUpLm/HGa8Pl17jOSRvSx03NJPrNP:9uXAUZmO1Pz7j9qiN9h

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\17520bc71a4e920a15bc2b34059cfbef182b8984f13dad009b29f5dc3e6afadb.exe
    "C:\Users\Admin\AppData\Local\Temp\17520bc71a4e920a15bc2b34059cfbef182b8984f13dad009b29f5dc3e6afadb.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2264

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2264-0-0x00000000008A0000-0x0000000001822000-memory.dmp

    Filesize

    15.5MB

  • memory/2264-15-0x0000000000130000-0x0000000000131000-memory.dmp

    Filesize

    4KB

  • memory/2264-13-0x0000000000130000-0x0000000000131000-memory.dmp

    Filesize

    4KB

  • memory/2264-31-0x0000000000160000-0x0000000000161000-memory.dmp

    Filesize

    4KB

  • memory/2264-29-0x0000000000160000-0x0000000000161000-memory.dmp

    Filesize

    4KB

  • memory/2264-26-0x0000000000150000-0x0000000000151000-memory.dmp

    Filesize

    4KB

  • memory/2264-24-0x0000000000150000-0x0000000000151000-memory.dmp

    Filesize

    4KB

  • memory/2264-36-0x0000000000180000-0x0000000000181000-memory.dmp

    Filesize

    4KB

  • memory/2264-38-0x0000000076FD0000-0x0000000076FD1000-memory.dmp

    Filesize

    4KB

  • memory/2264-34-0x0000000000180000-0x0000000000181000-memory.dmp

    Filesize

    4KB

  • memory/2264-32-0x0000000000180000-0x0000000000181000-memory.dmp

    Filesize

    4KB

  • memory/2264-21-0x0000000000140000-0x0000000000141000-memory.dmp

    Filesize

    4KB

  • memory/2264-19-0x00000000008A0000-0x0000000001822000-memory.dmp

    Filesize

    15.5MB

  • memory/2264-18-0x0000000000140000-0x0000000000141000-memory.dmp

    Filesize

    4KB

  • memory/2264-10-0x0000000000120000-0x0000000000121000-memory.dmp

    Filesize

    4KB

  • memory/2264-8-0x0000000000120000-0x0000000000121000-memory.dmp

    Filesize

    4KB

  • memory/2264-6-0x0000000000120000-0x0000000000121000-memory.dmp

    Filesize

    4KB

  • memory/2264-5-0x0000000000110000-0x0000000000111000-memory.dmp

    Filesize

    4KB

  • memory/2264-3-0x0000000000110000-0x0000000000111000-memory.dmp

    Filesize

    4KB

  • memory/2264-1-0x0000000000110000-0x0000000000111000-memory.dmp

    Filesize

    4KB

  • memory/2264-41-0x00000000008A0000-0x0000000001822000-memory.dmp

    Filesize

    15.5MB