Analysis
-
max time kernel
37s -
max time network
37s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
26-03-2024 16:53
Errors
Reason
Machine shutdown
General
-
Target
87bcc495ec10c56b860450897f03869b74c66c2a2bd336d4fff67d2d777ad865.exe
-
Size
460KB
-
MD5
bf2930daa322a99e99951225f6da2d5c
-
SHA1
8ae776a5120e0faa683dbb04e4a18c8fc5d3c916
-
SHA256
87bcc495ec10c56b860450897f03869b74c66c2a2bd336d4fff67d2d777ad865
-
SHA512
c35dfff04680bda112beda135ec5ec655709da5f29b16a213d98bfacf75a3b6ca1f23e0fcd3392dccc4eb60e0293e48e5bc8742222ea8bb576ce7fa9176bb10b
-
SSDEEP
6144:b9t+Pt/xpwV60yGNLnvWJ/fOPVYvFRE1iU+YQBO6uWaD8vlLZyBbd/2Zf1s0uDG7:b+PtJWV6GvKExQDuWmJdq9GksM
Score
8/10
Malware Config
Signatures
-
Disables Task Manager via registry modification
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\87bcc495ec10c56b860450897f03869b74c66c2a2bd336d4fff67d2d777ad865.exe"C:\Users\Admin\AppData\Local\Temp\87bcc495ec10c56b860450897f03869b74c66c2a2bd336d4fff67d2d777ad865.exe"1⤵
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\LogonUI.exe"LogonUI.exe" /flags:0x01⤵
-
C:\Windows\system32\LogonUI.exe"LogonUI.exe" /flags:0x11⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2036-0-0x00000000002A0000-0x00000000002A1000-memory.dmpFilesize
4KB
-
memory/2036-1-0x0000000000400000-0x0000000000478000-memory.dmpFilesize
480KB
-
memory/2036-3-0x00000000002A0000-0x00000000002A1000-memory.dmpFilesize
4KB
-
memory/2608-4-0x0000000002D90000-0x0000000002D91000-memory.dmpFilesize
4KB
-
memory/2940-7-0x0000000002BB0000-0x0000000002BB1000-memory.dmpFilesize
4KB