Analysis

  • max time kernel
    141s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/01/2024, 04:45

General

  • Target

    7eec460c26bbed84070522a97a4f8a76.exe

  • Size

    105KB

  • MD5

    7eec460c26bbed84070522a97a4f8a76

  • SHA1

    7e5d2a7ea78534d68cadec6c1916e152afe7d064

  • SHA256

    1d933c5cc005e452a1ef90cc882526927e0f2413815deaf06db7d3979dea17e5

  • SHA512

    8ba398c289442347e3c9397781171f48d2e65763b676f12be4805c2fc0f2f3e785de9d5bf7af6b373be936f7d2c736c61e2ec6e26a460a00037c14cee6155dd4

  • SSDEEP

    1536:dMUaOFarSkGIeyt1WWHo2fb77cVR3bixBNy6enS6SoMQ4Z1f2fFqn1Ryj:dMjOeSkkfWHoGb74VR3b2BNFSIHu0Pi

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Drops file in System32 directory 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7eec460c26bbed84070522a97a4f8a76.exe
    "C:\Users\Admin\AppData\Local\Temp\7eec460c26bbed84070522a97a4f8a76.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in System32 directory
    • Suspicious use of SetWindowsHookEx
    PID:224

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Windows\SysWOW64\msxml71.dll

    Filesize

    119KB

    MD5

    dfe61f3329b7bae710590b45912ec887

    SHA1

    777c30ad486cf41ec9d239fa4a38821162122d32

    SHA256

    a03b4811340631ef8d69e69fadd2abdb3b1bdda3a396760d35c1146210a939fa

    SHA512

    52e1e332e18864da6ca95dd0ec42a0ccc335eb967e558878e32586dc5cbc8686d9e107032befe6a774f9c123235e21e578c11c3900ce47bac4fda5f271427dbf

  • memory/224-0-0x0000000000400000-0x0000000000430000-memory.dmp

    Filesize

    192KB

  • memory/224-5-0x0000000000400000-0x0000000000430000-memory.dmp

    Filesize

    192KB

  • memory/224-6-0x0000000010000000-0x0000000010035000-memory.dmp

    Filesize

    212KB