2558d55d48bb613b18641ff03cdd341be02a8700177a001b56f8833530d2b445

Analysis

max time kernel
120s
max time network
124s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
25/03/2024, 12:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

de0b1fb011414a0d854878c232df2c80.exe
Size

8.7MB
MD5

de0b1fb011414a0d854878c232df2c80
SHA1

9b557e39708cf6d3f8de08cedc1197857477531e
SHA256

2558d55d48bb613b18641ff03cdd341be02a8700177a001b56f8833530d2b445
SHA512

86f5c4dc9ad9356b0ab1df9781fadd4787ed8d7050323efcd60ddcfd826e760520d8e49a4029dd4c452a36f2b8994c315f026ea2f14e76226f1139ffcf0e0350
SSDEEP

98304:TVBlqKR/z3wYiTKK+xJoo6QToHPjx2LU0ndWgDp5WQSS8MN7Pnnh7NeJN:tqKJeKK+xJLaNClGxXeTnn1UJN

Score

5^/10

Malware Config

Signatures

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2228 set thread context of 2752	2228	de0b1fb011414a0d854878c232df2c80.exe	28

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2752	de0b1fb011414a0d854878c232df2c80.exe
2752	de0b1fb011414a0d854878c232df2c80.exe

Suspicious use of WriteProcessMemory 14 IoCs

description	pid	Process	procid_target
PID 2228 wrote to memory of 2752	2228	de0b1fb011414a0d854878c232df2c80.exe	28
PID 2228 wrote to memory of 2752	2228	de0b1fb011414a0d854878c232df2c80.exe	28
PID 2228 wrote to memory of 2752	2228	de0b1fb011414a0d854878c232df2c80.exe	28
PID 2228 wrote to memory of 2752	2228	de0b1fb011414a0d854878c232df2c80.exe	28
PID 2228 wrote to memory of 2752	2228	de0b1fb011414a0d854878c232df2c80.exe	28
PID 2228 wrote to memory of 2752	2228	de0b1fb011414a0d854878c232df2c80.exe	28
PID 2228 wrote to memory of 2752	2228	de0b1fb011414a0d854878c232df2c80.exe	28
PID 2228 wrote to memory of 2752	2228	de0b1fb011414a0d854878c232df2c80.exe	28
PID 2228 wrote to memory of 2752	2228	de0b1fb011414a0d854878c232df2c80.exe	28
PID 2228 wrote to memory of 2752	2228	de0b1fb011414a0d854878c232df2c80.exe	28
PID 2228 wrote to memory of 2752	2228	de0b1fb011414a0d854878c232df2c80.exe	28
PID 2228 wrote to memory of 2752	2228	de0b1fb011414a0d854878c232df2c80.exe	28
PID 2228 wrote to memory of 2752	2228	de0b1fb011414a0d854878c232df2c80.exe	28
PID 2228 wrote to memory of 2752	2228	de0b1fb011414a0d854878c232df2c80.exe	28

C:\Users\Admin\AppData\Local\Temp\de0b1fb011414a0d854878c232df2c80.exe
"C:\Users\Admin\AppData\Local\Temp\de0b1fb011414a0d854878c232df2c80.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:2228
- C:\Users\Admin\AppData\Local\Temp\de0b1fb011414a0d854878c232df2c80.exe
  "C:\Users\Admin\AppData\Local\Temp\de0b1fb011414a0d854878c232df2c80.exe"
  2⤵
  - Suspicious use of SetWindowsHookEx
  PID:2752

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2228-0-0x0000000000230000-0x0000000000231000-memory.dmp

Filesize
4KB

Download
memory/2228-25-0x0000000000400000-0x0000000000BF0000-memory.dmp

Filesize
7.9MB

Download
memory/2752-19-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2752-21-0x0000000000400000-0x0000000000998000-memory.dmp

Filesize
5.6MB

Download
memory/2752-7-0x0000000000400000-0x0000000000998000-memory.dmp

Filesize
5.6MB

Download
memory/2752-9-0x0000000000400000-0x0000000000998000-memory.dmp

Filesize
5.6MB

Download
memory/2752-11-0x0000000000400000-0x0000000000998000-memory.dmp

Filesize
5.6MB

Download
memory/2752-13-0x0000000000400000-0x0000000000998000-memory.dmp

Filesize
5.6MB

Download
memory/2752-15-0x0000000000400000-0x0000000000998000-memory.dmp

Filesize
5.6MB

Download
memory/2752-17-0x0000000000400000-0x0000000000998000-memory.dmp

Filesize
5.6MB

Download
memory/2752-3-0x0000000000400000-0x0000000000998000-memory.dmp

Filesize
5.6MB

Download
memory/2752-5-0x0000000000400000-0x0000000000998000-memory.dmp

Filesize
5.6MB

Download
memory/2752-23-0x0000000000400000-0x0000000000998000-memory.dmp

Filesize
5.6MB

Download
memory/2752-24-0x0000000000400000-0x0000000000998000-memory.dmp

Filesize
5.6MB

Download
memory/2752-26-0x0000000000400000-0x0000000000998000-memory.dmp

Filesize
5.6MB

Download
memory/2752-27-0x0000000000400000-0x0000000000998000-memory.dmp

Filesize
5.6MB

Download
memory/2752-1-0x0000000000400000-0x0000000000998000-memory.dmp

Filesize
5.6MB

Download
memory/2752-28-0x0000000000400000-0x0000000000998000-memory.dmp

Filesize
5.6MB

Download
memory/2752-29-0x0000000000230000-0x0000000000231000-memory.dmp

Filesize
4KB

Download
memory/2752-31-0x0000000000400000-0x0000000000998000-memory.dmp

Filesize
5.6MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads