3c9c3f642ea74818c81c410f7bb5e158af4493086eea83e9242d8c45f20da0ec | Triage

Analysis

max time kernel
117s
max time network
120s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25-01-2024 16:05

Sharing

Report Analysis Logs

General

Target

74edf9734bb96204a358e9fb6f0012ef.exe
Size

55KB
MD5

74edf9734bb96204a358e9fb6f0012ef
SHA1

a9d1c1f2a6d0a857d1ff050863e2d3a3c1a8a6c3
SHA256

3c9c3f642ea74818c81c410f7bb5e158af4493086eea83e9242d8c45f20da0ec
SHA512

45b9ca144e5cb9d3db57fa5d727e9f2d958017a8eec93a805f3244ce469c697ea2a24043ebd477511aa57c8090a7a3db7bac0e08b07109051cc3d4aabfb407df
SSDEEP

1536:hOSK1wb46EtXyaB+/0l4AMkvZB428FNCr5giVm0lJl:h3K1kW9+C/vU28FUJL

Score

5^/10

Malware Config

Signatures

Drops file in System32 directory 1 IoCs

Processes:

74edf9734bb96204a358e9fb6f0012ef.exe

description ioc process

File created C:\Windows\SysWOW64\ChamaleonButton.ocx 74edf9734bb96204a358e9fb6f0012ef.exe
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

74edf9734bb96204a358e9fb6f0012ef.exe

pid process

3052 74edf9734bb96204a358e9fb6f0012ef.exe

C:\Users\Admin\AppData\Local\Temp\74edf9734bb96204a358e9fb6f0012ef.exe
"C:\Users\Admin\AppData\Local\Temp\74edf9734bb96204a358e9fb6f0012ef.exe"
1⤵
- Drops file in System32 directory
- Suspicious use of SetWindowsHookEx
PID:3052

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3052-0-0x0000000000400000-0x0000000000425000-memory.dmp

Filesize
148KB

Download
memory/3052-4-0x0000000000400000-0x0000000000425000-memory.dmp

Filesize
148KB

Download