Analysis

  • max time kernel
    140s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    03-04-2024 06:58

General

  • Target

    e436e38b4a8ff3443c08171d72cd3c23ad5b62d6dc57dbcb14f42511a7e1d31f.exe

  • Size

    788KB

  • MD5

    ab1552babc99a0af2635fe4fcce9b883

  • SHA1

    c5bb5a22c9745e77680beec27ce6b2f624aa9403

  • SHA256

    e436e38b4a8ff3443c08171d72cd3c23ad5b62d6dc57dbcb14f42511a7e1d31f

  • SHA512

    3c37c3352b17b94f084b33bfe24ff4ee7fb66d18deb871f004392954b79844c9acc38b81a5635c7e5d19757c658e7d85a14b40fe89446c8dc26e41ed054bdd22

  • SSDEEP

    6144:Iw02AllASwPw2nhfqH0WUTL0n8oGmXlUFzvUZ/oRGc53/hgaWJ+MKjnJKh:IBVydnhw0jTC85FsoRGc5Zga+PN

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e436e38b4a8ff3443c08171d72cd3c23ad5b62d6dc57dbcb14f42511a7e1d31f.exe
    "C:\Users\Admin\AppData\Local\Temp\e436e38b4a8ff3443c08171d72cd3c23ad5b62d6dc57dbcb14f42511a7e1d31f.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2192

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2192-0-0x0000000000400000-0x000000000053F000-memory.dmp

    Filesize

    1.2MB

  • memory/2192-1-0x0000000001DC0000-0x0000000001E1F000-memory.dmp

    Filesize

    380KB

  • memory/2192-9-0x00000000032A0000-0x00000000032A2000-memory.dmp

    Filesize

    8KB

  • memory/2192-8-0x00000000032B0000-0x00000000032B1000-memory.dmp

    Filesize

    4KB

  • memory/2192-7-0x00000000032C0000-0x00000000032C1000-memory.dmp

    Filesize

    4KB

  • memory/2192-6-0x0000000002400000-0x0000000002401000-memory.dmp

    Filesize

    4KB

  • memory/2192-5-0x00000000023B0000-0x00000000023B1000-memory.dmp

    Filesize

    4KB

  • memory/2192-4-0x00000000023D0000-0x00000000023D1000-memory.dmp

    Filesize

    4KB

  • memory/2192-3-0x0000000001FA0000-0x0000000001FA1000-memory.dmp

    Filesize

    4KB

  • memory/2192-2-0x00000000023A0000-0x00000000023A1000-memory.dmp

    Filesize

    4KB

  • memory/2192-10-0x00000000023E0000-0x00000000023E1000-memory.dmp

    Filesize

    4KB

  • memory/2192-11-0x0000000003310000-0x0000000003311000-memory.dmp

    Filesize

    4KB

  • memory/2192-12-0x0000000003300000-0x0000000003301000-memory.dmp

    Filesize

    4KB

  • memory/2192-13-0x0000000000400000-0x000000000053F000-memory.dmp

    Filesize

    1.2MB

  • memory/2192-14-0x0000000001DC0000-0x0000000001E1F000-memory.dmp

    Filesize

    380KB