Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    25/01/2024, 04:08

General

  • Target

    73b2e2e0d8be0b117193b38644fbe637.exe

  • Size

    1.3MB

  • MD5

    73b2e2e0d8be0b117193b38644fbe637

  • SHA1

    4dd20ba526d85a647b0eba36ba07e0ae4451e1da

  • SHA256

    05243203a71fbe2fc66b4c2429d75273d0d3bb95c8eb82383897d198e6169242

  • SHA512

    f106bb5881e19dce1d602b88bbefb4f00d24f1157a1f963b30ba6845d9969d940cb994072e189e67dd8b50019f2c57bf5fe551da9aae1d55487541b2cd573133

  • SSDEEP

    24576:YpHfjqNgbxwAr4veHnQUq78dDHeFHHp4LsnSVvO5LGUP3bKHCrF:YNjSCeAMv8nZdKFmwnSVWgoqCF

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\73b2e2e0d8be0b117193b38644fbe637.exe
    "C:\Users\Admin\AppData\Local\Temp\73b2e2e0d8be0b117193b38644fbe637.exe"
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of SetWindowsHookEx
    PID:1688

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1688-1-0x0000000000400000-0x000000000062D000-memory.dmp

    Filesize

    2.2MB

  • memory/1688-2-0x0000000000270000-0x00000000002AD000-memory.dmp

    Filesize

    244KB

  • memory/1688-3-0x0000000076F60000-0x0000000076F61000-memory.dmp

    Filesize

    4KB

  • memory/1688-0-0x0000000000250000-0x0000000000251000-memory.dmp

    Filesize

    4KB

  • memory/1688-4-0x00000000757D0000-0x00000000758E0000-memory.dmp

    Filesize

    1.1MB

  • memory/1688-10-0x00000000021A0000-0x00000000022A0000-memory.dmp

    Filesize

    1024KB

  • memory/1688-12-0x0000000002000000-0x0000000002100000-memory.dmp

    Filesize

    1024KB

  • memory/1688-11-0x0000000000400000-0x000000000062D000-memory.dmp

    Filesize

    2.2MB

  • memory/1688-9-0x00000000022A0000-0x00000000023A0000-memory.dmp

    Filesize

    1024KB

  • memory/1688-8-0x0000000002190000-0x00000000021A0000-memory.dmp

    Filesize

    64KB

  • memory/1688-7-0x0000000000700000-0x0000000000710000-memory.dmp

    Filesize

    64KB

  • memory/1688-6-0x0000000000700000-0x0000000000710000-memory.dmp

    Filesize

    64KB

  • memory/1688-5-0x0000000000300000-0x0000000000310000-memory.dmp

    Filesize

    64KB

  • memory/1688-21-0x0000000000400000-0x000000000062D000-memory.dmp

    Filesize

    2.2MB

  • memory/1688-22-0x00000000757D0000-0x00000000758E0000-memory.dmp

    Filesize

    1.1MB

  • memory/1688-23-0x0000000000270000-0x00000000002AD000-memory.dmp

    Filesize

    244KB