Analysis
-
max time kernel
141s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
03-04-2024 06:58
Static task
static1
Behavioral task
behavioral1
Sample
e436e38b4a8ff3443c08171d72cd3c23ad5b62d6dc57dbcb14f42511a7e1d31f.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
e436e38b4a8ff3443c08171d72cd3c23ad5b62d6dc57dbcb14f42511a7e1d31f.exe
Resource
win10v2004-20231215-en
General
-
Target
e436e38b4a8ff3443c08171d72cd3c23ad5b62d6dc57dbcb14f42511a7e1d31f.exe
-
Size
788KB
-
MD5
ab1552babc99a0af2635fe4fcce9b883
-
SHA1
c5bb5a22c9745e77680beec27ce6b2f624aa9403
-
SHA256
e436e38b4a8ff3443c08171d72cd3c23ad5b62d6dc57dbcb14f42511a7e1d31f
-
SHA512
3c37c3352b17b94f084b33bfe24ff4ee7fb66d18deb871f004392954b79844c9acc38b81a5635c7e5d19757c658e7d85a14b40fe89446c8dc26e41ed054bdd22
-
SSDEEP
6144:Iw02AllASwPw2nhfqH0WUTL0n8oGmXlUFzvUZ/oRGc53/hgaWJ+MKjnJKh:IBVydnhw0jTC85FsoRGc5Zga+PN
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes:
e436e38b4a8ff3443c08171d72cd3c23ad5b62d6dc57dbcb14f42511a7e1d31f.exepid process 400 e436e38b4a8ff3443c08171d72cd3c23ad5b62d6dc57dbcb14f42511a7e1d31f.exe 400 e436e38b4a8ff3443c08171d72cd3c23ad5b62d6dc57dbcb14f42511a7e1d31f.exe 400 e436e38b4a8ff3443c08171d72cd3c23ad5b62d6dc57dbcb14f42511a7e1d31f.exe 400 e436e38b4a8ff3443c08171d72cd3c23ad5b62d6dc57dbcb14f42511a7e1d31f.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/400-0-0x0000000000400000-0x000000000053F000-memory.dmpFilesize
1.2MB
-
memory/400-1-0x0000000002270000-0x00000000022CF000-memory.dmpFilesize
380KB
-
memory/400-2-0x00000000024D0000-0x00000000024D1000-memory.dmpFilesize
4KB
-
memory/400-3-0x0000000002490000-0x0000000002491000-memory.dmpFilesize
4KB
-
memory/400-4-0x0000000002480000-0x0000000002481000-memory.dmpFilesize
4KB
-
memory/400-5-0x00000000024C0000-0x00000000024C1000-memory.dmpFilesize
4KB
-
memory/400-6-0x00000000024A0000-0x00000000024A1000-memory.dmpFilesize
4KB
-
memory/400-7-0x00000000024F0000-0x00000000024F1000-memory.dmpFilesize
4KB
-
memory/400-8-0x00000000033C0000-0x00000000033C1000-memory.dmpFilesize
4KB
-
memory/400-9-0x00000000033B0000-0x00000000033B1000-memory.dmpFilesize
4KB
-
memory/400-10-0x00000000033A0000-0x00000000033A2000-memory.dmpFilesize
8KB
-
memory/400-11-0x0000000003410000-0x0000000003411000-memory.dmpFilesize
4KB
-
memory/400-12-0x0000000003400000-0x0000000003401000-memory.dmpFilesize
4KB
-
memory/400-13-0x0000000000400000-0x000000000053F000-memory.dmpFilesize
1.2MB
-
memory/400-14-0x0000000002270000-0x00000000022CF000-memory.dmpFilesize
380KB