Analysis

  • max time kernel
    140s
  • max time network
    105s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10-05-2024 02:20

General

  • Target

    f94020d66e13994b33fd4e395a4366ee80fb7b0736f37a93c02cfac133f85399.exe

  • Size

    4.5MB

  • MD5

    e2b9fe946f81df1d336e78bf28e9ae22

  • SHA1

    d2dd8db76293a7ff101ebc7c0cdc90416839e5fc

  • SHA256

    f94020d66e13994b33fd4e395a4366ee80fb7b0736f37a93c02cfac133f85399

  • SHA512

    a83341aacdb3ccf7617e6b19df06a8778c99ca416533364ddc1ddc1776ddebd10a9040b865c15b0cc02088e6e4240ff5baa5b7ba04f4998e5b50037e889edba6

  • SSDEEP

    98304:nApbCeu/4P6GAEHw685+REUbwEsLxlNdqz5MoynG8FHXtnty7KW8imZQ5/bnBACF:Yv68Hy+uU1q7RLW8im4/LKCm/Q

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f94020d66e13994b33fd4e395a4366ee80fb7b0736f37a93c02cfac133f85399.exe
    "C:\Users\Admin\AppData\Local\Temp\f94020d66e13994b33fd4e395a4366ee80fb7b0736f37a93c02cfac133f85399.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of SetWindowsHookEx
    PID:2964

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\RegDm.dll

    Filesize

    52KB

    MD5

    fdc8b75a37017141831e3421479307be

    SHA1

    f6a08cc570d5e5bc4218da376ca353d46d62790d

    SHA256

    2a37ce301490bd4b7c5d02b768b054705fe4620db6ef81061718c1fe89c9f27e

    SHA512

    d74e2de28523317c928965affa464cef6ba5c4da9ab05d30a79a4d3bbb59284d68331b5735c705cf73e155cf3a42b01ef5cd7219c72c242eed6b711090066537

  • memory/2964-17-0x0000000002710000-0x0000000002711000-memory.dmp

    Filesize

    4KB

  • memory/2964-16-0x000000006FFF0000-0x0000000070000000-memory.dmp

    Filesize

    64KB

  • memory/2964-15-0x0000000002710000-0x0000000002711000-memory.dmp

    Filesize

    4KB

  • memory/2964-14-0x0000000076EE3000-0x0000000076EE4000-memory.dmp

    Filesize

    4KB

  • memory/2964-13-0x0000000002710000-0x0000000002711000-memory.dmp

    Filesize

    4KB

  • memory/2964-12-0x0000000002710000-0x0000000002711000-memory.dmp

    Filesize

    4KB

  • memory/2964-11-0x0000000002710000-0x0000000002711000-memory.dmp

    Filesize

    4KB

  • memory/2964-10-0x0000000002710000-0x0000000002711000-memory.dmp

    Filesize

    4KB

  • memory/2964-9-0x0000000002710000-0x0000000002711000-memory.dmp

    Filesize

    4KB

  • memory/2964-8-0x0000000002710000-0x0000000002711000-memory.dmp

    Filesize

    4KB

  • memory/2964-7-0x0000000076EE2000-0x0000000076EE3000-memory.dmp

    Filesize

    4KB

  • memory/2964-6-0x0000000002710000-0x0000000002711000-memory.dmp

    Filesize

    4KB

  • memory/2964-18-0x0000000002710000-0x0000000002711000-memory.dmp

    Filesize

    4KB