Analysis

  • max time kernel
    120s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    12/03/2024, 17:48

General

  • Target

    c3fa582509cc366c23b9f99ab26d1f86.exe

  • Size

    635KB

  • MD5

    c3fa582509cc366c23b9f99ab26d1f86

  • SHA1

    b668fa9f2d95788bfdd15ba5f6875dde74bd1dfa

  • SHA256

    9da2b4c0ce079a3b88dad02ea9cdefa58e4d301e434eac4692fbd020bf115936

  • SHA512

    e4f5eeeec4cd9388935b16f087568d38d0e4d908be679b5353f4c54765f2519eac6acdcc0e4936c190a5f2204c95807137bfe6e0faebc32f8a3b6554231a2598

  • SSDEEP

    12288:lIbPsXD/YIYkaJou7JYOoujbeWADdAq08rWrDUj8pBK:lesXD/YIYkaJogJYOBbeWADdAqfWrDUP

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c3fa582509cc366c23b9f99ab26d1f86.exe
    "C:\Users\Admin\AppData\Local\Temp\c3fa582509cc366c23b9f99ab26d1f86.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1856

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\offconfig.temp

          Filesize

          590B

          MD5

          fd032581082f3f5ee4bfdc900eb4cd21

          SHA1

          aca09327bc7a35c922ec1728591861d1bfd377ac

          SHA256

          dc363bfde0323634784486070cb0bc4799f710eed1fce60cce73a0ad27dfd4ac

          SHA512

          a7b5b8b9d04fbd9d24a6fa6c709c6055be90e04fc82d3e215c2202f7690837b29267e1361dfa783e8c9e320a5d8ee3d3759e629a8e191e9cc28dcf8e77c29905