27f77aa2557d2be59442e982d0c607e39e82da9cd8090e12fc66020df9e8646e

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
15/03/2024, 16:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

cbd9da1cbddb1cda00ac7acabcc43d69.exe
Size

46KB
MD5

cbd9da1cbddb1cda00ac7acabcc43d69
SHA1

3d68f76c8ae01ebcdab396e0d42df1521e45a916
SHA256

27f77aa2557d2be59442e982d0c607e39e82da9cd8090e12fc66020df9e8646e
SHA512

8eed85ee1f5e47d8536baf57f8b74e42d2fa5bc548c3cdc932508005bf073b3c92f8299c5a41314bee7f32533bbe61c2efcd4192841643d3ccd1d89c1572ce43
SSDEEP

768:p9kGF5w027qaYe5xYGOzhciOoBSS5mPZtTH16bJbhCiIaMTSaLfxpWgG5ZZuPJF6:3kWOqaYe5dOVcp+i16FtCiIaqTWg4c6

Score

6^/10

discovery

Malware Config

Signatures

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2000	cbd9da1cbddb1cda00ac7acabcc43d69.exe

C:\Users\Admin\AppData\Local\Temp\cbd9da1cbddb1cda00ac7acabcc43d69.exe
"C:\Users\Admin\AppData\Local\Temp\cbd9da1cbddb1cda00ac7acabcc43d69.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2000

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2000-0-0x0000000000400000-0x000000000041B000-memory.dmp

Filesize
108KB

Download
memory/2000-1-0x0000000000400000-0x000000000041B000-memory.dmp

Filesize
108KB

Download
memory/2000-2-0x0000000000400000-0x000000000041B000-memory.dmp

Filesize
108KB

Download
memory/2000-3-0x0000000000400000-0x000000000041B000-memory.dmp

Filesize
108KB

Download