Analysis

  • max time kernel
    94s
  • max time network
    156s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/02/2024, 02:23

General

  • Target

    ad72ae55ab4962539e4b1476bd7451fa.exe

  • Size

    32KB

  • MD5

    ad72ae55ab4962539e4b1476bd7451fa

  • SHA1

    cda931c8c0ed19faa88cf4fbd5f793047eee3ffa

  • SHA256

    2c430d7a94dbeffae0d591c947d75ac9cf1a0fe8504b9f94952f72f28d81cade

  • SHA512

    589816b67c7df42262da57b8d2a5bafaa29883a8cd30164a49a8bad37e53c679c3da404058dd4b4c6d44d2952051e73e19f741af025e8a18078ae66fa71d0d28

  • SSDEEP

    384:ZQHvw895MQL/rd6It8t7VqazI7TIWMftDOWl3jn9Lv7hvaJ+fFC0L:Yw89v2t7VhI7jyOWln9hTL

Score
6/10

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ad72ae55ab4962539e4b1476bd7451fa.exe
    "C:\Users\Admin\AppData\Local\Temp\ad72ae55ab4962539e4b1476bd7451fa.exe"
    1⤵
    • Adds Run key to start application
    • Suspicious use of SetWindowsHookEx
    PID:228

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/228-0-0x000000001BDE0000-0x000000001C2AE000-memory.dmp

    Filesize

    4.8MB

  • memory/228-1-0x00007FFBBC5B0000-0x00007FFBBCF51000-memory.dmp

    Filesize

    9.6MB

  • memory/228-2-0x000000001B810000-0x000000001B8B6000-memory.dmp

    Filesize

    664KB

  • memory/228-3-0x000000001C4A0000-0x000000001C53C000-memory.dmp

    Filesize

    624KB

  • memory/228-5-0x00000000010F0000-0x0000000001100000-memory.dmp

    Filesize

    64KB

  • memory/228-4-0x00007FFBBC5B0000-0x00007FFBBCF51000-memory.dmp

    Filesize

    9.6MB

  • memory/228-8-0x00000000010F0000-0x0000000001100000-memory.dmp

    Filesize

    64KB

  • memory/228-7-0x00000000010C0000-0x00000000010C8000-memory.dmp

    Filesize

    32KB

  • memory/228-9-0x00007FFBBC5B0000-0x00007FFBBCF51000-memory.dmp

    Filesize

    9.6MB

  • memory/228-10-0x00000000010F0000-0x0000000001100000-memory.dmp

    Filesize

    64KB

  • memory/228-11-0x00000000010F0000-0x0000000001100000-memory.dmp

    Filesize

    64KB