Analysis
-
max time kernel
290s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
14/05/2024, 12:42
General
-
Target
keymaker.exe
-
Size
402KB
-
MD5
bac302ab497ac5431c02f1f08c018a25
-
SHA1
7c0216d7a0a11f3f589d289a064cdd0de21dafd1
-
SHA256
003d1c7137a2f8ce2fef504291622c11318f170819f9630b03efdb547704eac6
-
SHA512
649312798207a139d565bc8b2a4810fee4ed007dadbc1b7d6938055be7e389364159028ddce0781fe92331f1845020090d96ebad0add71106a40c71bfa2dc7ab
-
SSDEEP
12288:xWARSM5q24Ai9nNaymXaaafCAdmE9GHjDe15CdNyXJYNvDfQDe+:xWDM5pZkNcloFDGDudi0e+
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\keymaker.exe"C:\Users\Admin\AppData\Local\Temp\keymaker.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: GetForegroundWindowSpam
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
89KB
MD5c8300c30ec04913e3037819f65c14f6b
SHA182a93b8682d0853da579dd85366ce9169bae3c21
SHA256c4b2c8161fdcf266d1547f50c86aec6567e63c6b92f863e8477d79ddedf8b9ed
SHA512c5e66dec58b815339434beb9df6ddeed7e41495dc6a3f5af1b92d53bf034c0671e8f4ea198c94fa983370a8ecd493b83456e3c495778c7288b75ef80b16f5568
-
Filesize
340KB
-
Filesize
340KB
-
Filesize
612KB
-
Filesize
340KB
-
Filesize
340KB
-
Filesize
340KB
-
Filesize
340KB
-
Filesize
340KB
-
Filesize
340KB
-
Filesize
340KB
-
Filesize
340KB
-
Filesize
340KB
-
Filesize
340KB
-
Filesize
340KB
-
Filesize
340KB
-
Filesize
612KB
-
Filesize
340KB
-
Filesize
340KB
-
Filesize
340KB
-
Filesize
340KB
-
Filesize
340KB
-
Filesize
340KB
-
Filesize
340KB
-
Filesize
340KB
-
Filesize
340KB
-
Filesize
340KB
-
Filesize
340KB
-
Filesize
340KB
-
Filesize
340KB
-
Filesize
340KB
-
Filesize
340KB
-
Filesize
340KB
-
Filesize
340KB