Analysis
-
max time kernel
145s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
26-01-2024 11:12
Static task
static1
Behavioral task
behavioral1
Sample
7734bb2e423a1fdb5a99b44bd6e0faad.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7734bb2e423a1fdb5a99b44bd6e0faad.exe
Resource
win10v2004-20231222-en
General
-
Target
7734bb2e423a1fdb5a99b44bd6e0faad.exe
-
Size
40KB
-
MD5
7734bb2e423a1fdb5a99b44bd6e0faad
-
SHA1
8656e4c62dbab668ad98f76c4f2c0cb91e1d608c
-
SHA256
368d57b2bd0d642073de70ec2e1bbb2428dd870bff0339774bb02691839aee0c
-
SHA512
009794adec193583ab17934cd06c985dbabeb14f0af46554aea87a4030f8f11717cb2622c96818c97eb25d824aad7ebb115e284a5d298eba8146bfbb6b4a4bb3
-
SSDEEP
384:3XzH9u0yw0VMKA6Opz4Gw+0U5MeskFJij1oP0ITon4cBFVOFrCDO:LEHw0lAtXFwesWJiJoPFgYFrn
Malware Config
Signatures
-
Drops file in Program Files directory 2 IoCs
description ioc Process File created C:\Program Files\OnScreen\onsinit.exe 7734bb2e423a1fdb5a99b44bd6e0faad.exe File opened for modification C:\Program Files\OnScreen\onsinit.exe 7734bb2e423a1fdb5a99b44bd6e0faad.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2928 7734bb2e423a1fdb5a99b44bd6e0faad.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
915B
MD5234879e55dab28dc3c7351999f3c1163
SHA151d0ed9508a1dcebfe1565463afe63a5552c13c8
SHA25669a99f3cb726a91305817fc4aea2d43299d4b4aa43016b05ef12c28fe0fa96cc
SHA512dc0411902a1ba07bbabaf10857ebbea16d9f612aeeb7dfed217972d1d62e9f013cb25f2d837f664e929911ba99cfe8c8840e453321df053eb914baacfa3b7204