Analysis
-
max time kernel
118s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
02-03-2024 20:51
General
-
Target
dcrat/data/Zip.exe
-
Size
263KB
-
MD5
9a2ea4da5eec75298f16ba444d3a98d6
-
SHA1
f4f790430556e36d418498cd2f3112d04dabf877
-
SHA256
2293fe261d5c6f5f2a33004b11f068037677b7aa5a6f792031e31555f31f0d69
-
SHA512
69c86181722d2416c1836c9d24df268ba04704898643d2e741d76d1f1493cd140013c95d8e00ce7a95a280cdd5869769a0fffa2fb0c8dc41bb4c8d8fd69f58f4
-
SSDEEP
3072:sv/MtM8A6OOodzRMOSgNs2Dsx7Cwbj59HvhaxO6M65ysytvg6VNf0ETA8B9kxpjK:sstlOOo8x7n59Z+zyu65QxpX+t4sP
Score
1/10
Malware Config
Signatures
-
Modifies Internet Explorer settings 1 TTPs 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\dcrat\data\Zip.exe"C:\Users\Admin\AppData\Local\Temp\dcrat\data\Zip.exe"1⤵
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx