Analysis
- max time kernel
140s - max time network
105s - platform
windows10-2004_x64 - resource
win10v2004-20240426-en - resource tags
- submitted
10/05/2024, 02:20
General
- Target f94020d66e13994b33fd4e395a4366ee80fb7b0736f37a93c02cfac133f85399.exe
- Size 4.5MB
- Sample240510-csqfbsgf54
- SHA256 f94020d66e13994b33fd4e395a4366ee80fb7b0736f37a93c02cfac133f85399
Malware Config
Signatures
- Loads dropped DLL 1 IoCs
- Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f94020d66e13994b33fd4e395a4366ee80fb7b0736f37a93c02cfac133f85399.exe"C:\Users\Admin\AppData\Local\Temp\f94020d66e13994b33fd4e395a4366ee80fb7b0736f37a93c02cfac133f85399.exe"1⤵
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
RegDm.dll
memory/2964-17-0x0000000002710000-0x0000000002711000-memory.dmp
memory/2964-16-0x000000006FFF0000-0x0000000070000000-memory.dmp
memory/2964-15-0x0000000002710000-0x0000000002711000-memory.dmp
memory/2964-14-0x0000000076EE3000-0x0000000076EE4000-memory.dmp
memory/2964-13-0x0000000002710000-0x0000000002711000-memory.dmp
memory/2964-12-0x0000000002710000-0x0000000002711000-memory.dmp
memory/2964-11-0x0000000002710000-0x0000000002711000-memory.dmp
memory/2964-10-0x0000000002710000-0x0000000002711000-memory.dmp
memory/2964-9-0x0000000002710000-0x0000000002711000-memory.dmp
memory/2964-8-0x0000000002710000-0x0000000002711000-memory.dmp
memory/2964-7-0x0000000076EE2000-0x0000000076EE3000-memory.dmp
memory/2964-6-0x0000000002710000-0x0000000002711000-memory.dmp
memory/2964-18-0x0000000002710000-0x0000000002711000-memory.dmp