Analysis

  • max time kernel
    120s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27-03-2024 01:26

General

  • Target

    e07184b0289f94077794fbab0ecbc417.exe

  • Size

    629KB

  • MD5

    e07184b0289f94077794fbab0ecbc417

  • SHA1

    403af2ade1f5f7d4a08d5705af94ac7c4e45e7d4

  • SHA256

    de3f78e470b39466b665aedfd531c6fb5a9d90784e4343b26983a31f6982f538

  • SHA512

    7b0e308eda8a21e50242266d11d7426dc768d0ba384104902df5897a4026a74c95a0bedb03244e1e1aec879f612459b44d3e2b62cbd21be09fc1bd504f6e638b

  • SSDEEP

    12288:3riHirsHTeReALcfk+O7JYwBrHVcp0qsl+TtGnIBlp1q:3rGirgeReALcfk+AJY8Rcp0qsqtGnI3q

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e07184b0289f94077794fbab0ecbc417.exe
    "C:\Users\Admin\AppData\Local\Temp\e07184b0289f94077794fbab0ecbc417.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1936

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\offconfig.temp

    Filesize

    576B

    MD5

    f542fc49a6fdbcc74a440cca6c83d0ec

    SHA1

    46dd270c6480bf1f7e76946f85d194f305f210a3

    SHA256

    4495bfb4bf064a15892566cdb0c910a12247a410ae1c00ec0a3bd6017fdfdc5a

    SHA512

    0e4f059ef16badf6c8e096ac94d015869c5e2d6b81c39e8cfb564c3f3269fa917962f81c7b5ac14393d5868506e911bbb5bfba861723722bb81abda7b2b58120