Analysis

  • max time kernel
    141s
  • max time network
    122s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11-02-2024 23:59

General

  • Target

    95b5a931740d780c4af7bb33b0a33b2a.exe

  • Size

    910KB

  • MD5

    95b5a931740d780c4af7bb33b0a33b2a

  • SHA1

    d6edbbc626b95b1fdd7a31e2de92f84a70336919

  • SHA256

    c5daf84f93ea2bf15f6443037cacf2109cf7ac07b1cca9d8bfe3d54f7a5001e9

  • SHA512

    6b1880900598795d0380521e7b846d3cfa0a2a7da9c3c8d1e0b66481323d065f10353d6395e06c40c541e79c9ba1a087f84cc4b49d420c59d8257960616e8bbe

  • SSDEEP

    24576:pRGTwxXlaZ/pZLxIu7IT2Bv+ZcL45/oVPRsms2Jm:/GsxoJxIu7IT2ZTb1Rtsem

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 5 IoCs
  • Suspicious use of SetWindowsHookEx 10 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\95b5a931740d780c4af7bb33b0a33b2a.exe
    "C:\Users\Admin\AppData\Local\Temp\95b5a931740d780c4af7bb33b0a33b2a.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of SetWindowsHookEx
    PID:1296

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\E_4\HtmlView.fne

    Filesize

    224KB

    MD5

    bb95f50bb5f2144bd8fa57e3dfc038ad

    SHA1

    62f55ca2eddb1978270010f3788427f6b3dc107c

    SHA256

    a6aed940c07783d91b78568901d79b108d0d13a6a92eab081fffdda798784972

    SHA512

    75ae009d1f9b9f24df17529c87d425850ba1750fe6d0d93aa619fba5b4ca89ab5c13927741e4df827fd3d47cb2a3fce08972c531468aa89bcb1bffe3fc2e51d5

  • C:\Users\Admin\AppData\Local\Temp\E_4\TrayIcon.fne

    Filesize

    144KB

    MD5

    f8707fc7275dbd973e9a7f72682450de

    SHA1

    54f00c9fb0827a69b133757fd67a474a1b35e31a

    SHA256

    a154fa991b1b8c202ae19a02f8a5f5b57745e9c6d7061908973e2da7f069625a

    SHA512

    2ed18f1dfaf898acbb8c78476a72a9403b67b25b05f588378a5979bb1e546829842f17a6abdd35d6b22c7a62c61a6e285ccc3aad31e7a8ba1607b879cf1c42c2

  • C:\Users\Admin\AppData\Local\Temp\E_4\krnln.fnr

    Filesize

    1.1MB

    MD5

    c99826e5901ad146870b4ea8c74c6979

    SHA1

    0bcb1393ecfacefb8ee3b6199526d9bbc51364c5

    SHA256

    03aff11e16d3346689e977733c0539a17a00a97ca29b1f38e54c6adc4fb5cd21

    SHA512

    b3f8991bd95c72837a8c39099cf4a142a1b546d247b1d53edc40943b9c9e98e0fea4c6730468a38c33fea54061244e6a9101c35416b7a8e3741166c81440622b

  • memory/1296-29-0x0000000002430000-0x0000000002431000-memory.dmp

    Filesize

    4KB

  • memory/1296-16-0x00000000022A0000-0x00000000022A1000-memory.dmp

    Filesize

    4KB

  • memory/1296-40-0x00000000024C0000-0x00000000024C1000-memory.dmp

    Filesize

    4KB

  • memory/1296-9-0x00000000007B0000-0x00000000007B1000-memory.dmp

    Filesize

    4KB

  • memory/1296-12-0x00000000007E0000-0x00000000007E1000-memory.dmp

    Filesize

    4KB

  • memory/1296-13-0x00000000022C0000-0x00000000022C1000-memory.dmp

    Filesize

    4KB

  • memory/1296-14-0x00000000007D0000-0x00000000007D1000-memory.dmp

    Filesize

    4KB

  • memory/1296-39-0x0000000002500000-0x0000000002501000-memory.dmp

    Filesize

    4KB

  • memory/1296-15-0x00000000029B0000-0x00000000029B1000-memory.dmp

    Filesize

    4KB

  • memory/1296-17-0x00000000029A0000-0x00000000029A1000-memory.dmp

    Filesize

    4KB

  • memory/1296-18-0x0000000002470000-0x0000000002471000-memory.dmp

    Filesize

    4KB

  • memory/1296-23-0x0000000002BD0000-0x0000000002C03000-memory.dmp

    Filesize

    204KB

  • memory/1296-38-0x0000000002440000-0x0000000002441000-memory.dmp

    Filesize

    4KB

  • memory/1296-19-0x0000000002490000-0x0000000002491000-memory.dmp

    Filesize

    4KB

  • memory/1296-27-0x0000000002480000-0x0000000002481000-memory.dmp

    Filesize

    4KB

  • memory/1296-25-0x0000000002450000-0x0000000002451000-memory.dmp

    Filesize

    4KB

  • memory/1296-33-0x0000000002F30000-0x0000000002F6B000-memory.dmp

    Filesize

    236KB

  • memory/1296-35-0x0000000002300000-0x0000000002301000-memory.dmp

    Filesize

    4KB

  • memory/1296-1-0x0000000000760000-0x00000000007AB000-memory.dmp

    Filesize

    300KB

  • memory/1296-0-0x0000000000400000-0x0000000000447000-memory.dmp

    Filesize

    284KB

  • memory/1296-2-0x00000000022B0000-0x00000000022B1000-memory.dmp

    Filesize

    4KB

  • memory/1296-6-0x00000000022D0000-0x00000000022D1000-memory.dmp

    Filesize

    4KB

  • memory/1296-7-0x00000000007F0000-0x00000000007F1000-memory.dmp

    Filesize

    4KB

  • memory/1296-41-0x00000000024F0000-0x00000000024F1000-memory.dmp

    Filesize

    4KB

  • memory/1296-42-0x00000000024E0000-0x00000000024E1000-memory.dmp

    Filesize

    4KB

  • memory/1296-43-0x0000000002510000-0x0000000002511000-memory.dmp

    Filesize

    4KB

  • memory/1296-44-0x00000000022F0000-0x00000000022F1000-memory.dmp

    Filesize

    4KB

  • memory/1296-45-0x00000000029F0000-0x0000000002A0B000-memory.dmp

    Filesize

    108KB

  • memory/1296-46-0x00000000029F0000-0x0000000002A0B000-memory.dmp

    Filesize

    108KB

  • memory/1296-47-0x00000000029F0000-0x0000000002A0B000-memory.dmp

    Filesize

    108KB

  • memory/1296-48-0x00000000029F0000-0x0000000002A0B000-memory.dmp

    Filesize

    108KB

  • memory/1296-49-0x00000000005E0000-0x00000000005E1000-memory.dmp

    Filesize

    4KB

  • memory/1296-50-0x00000000005F0000-0x00000000005F1000-memory.dmp

    Filesize

    4KB

  • memory/1296-51-0x00000000029E0000-0x00000000029E1000-memory.dmp

    Filesize

    4KB

  • memory/1296-52-0x00000000029D0000-0x00000000029D1000-memory.dmp

    Filesize

    4KB

  • memory/1296-53-0x00000000029C0000-0x00000000029C1000-memory.dmp

    Filesize

    4KB

  • memory/1296-65-0x0000000000400000-0x0000000000447000-memory.dmp

    Filesize

    284KB

  • memory/1296-67-0x0000000000760000-0x00000000007AB000-memory.dmp

    Filesize

    300KB

  • memory/1296-68-0x00000000029F0000-0x0000000002A0B000-memory.dmp

    Filesize

    108KB

  • memory/1296-69-0x00000000029F0000-0x0000000002A0B000-memory.dmp

    Filesize

    108KB

  • memory/1296-70-0x00000000029F0000-0x0000000002A0B000-memory.dmp

    Filesize

    108KB

  • memory/1296-71-0x00000000029F0000-0x0000000002A0B000-memory.dmp

    Filesize

    108KB