Analysis
-
max time kernel
120s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
16/05/2024, 15:55
General
-
Target
TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630/sm32Xtest_V2.03.50_v5_K0928.exe
-
Size
2.1MB
-
MD5
31b659e1bd7806be119c01117eee0b21
-
SHA1
9c3e74fd7bf4a3200aa0859d5d0dadc5637948cb
-
SHA256
89f44007912dee30e9c56587d4863ad66e45c7e8b0f26902c1e63ed3d0a02710
-
SHA512
e4911f384557ca5084eb38f4939ecc90a9955e6c3383dcf9344093618c19f050c2b3367d347baba8a712dc21769bea5189aae5ee6b9b4326c1cb75b298f44559
-
SSDEEP
24576:fN5MOBKqTbsvt6Yj88peFZ+cK8GEhf+aGOGDqD5E7aaXUJo/wi0DPOPCR2oo0UnI:NBZbsvgYwu2tqdeqrCm0Unrxixt
Malware Config
Signatures
-
Drops file in Windows directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630\sm32Xtest_V2.03.50_v5_K0928.exe"C:\Users\Admin\AppData\Local\Temp\TRANSCEND-SM32X-PV1.0.68-BY-TAGARAZ-L0630\sm32Xtest_V2.03.50_v5_K0928.exe"1⤵
- Drops file in Windows directory
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
767B
MD5fcc520e3ca03a316e17300a3d919186c
SHA1e45dea574cc19f742c2ee8621f527fe8f7cb698d
SHA256b9b9e8dddae07588fc800cdf659ae9d9e4b9c054c2f195e6fe4d960f8a5a6af3
SHA512a717357f5a0440e88e5a960c47c6c0af861a94eb6ea76965b8955100e6c7806c8debf18a6b726b884fc966459f5d43fe88c4f5a1ef4a77b53f4c6b93fa53bdaa
-
Filesize
35B
MD5bc589549bae17eab17375cef6e62abbd
SHA1dc6700647a84d0af21b3bbac98a902b7f9ec5edb
SHA2568fb3199c7cc03b7d5f456364045407857473b926990bc2044d1dfe4c8d2244cb
SHA51241451014552f1abc56ae414c9bbb75a970e5ae6684dbecac8deebddbc4d6b207bda3f828f18167d31fa37ffe5a0dae28d4b4459f91d3186854192cf18bc77c5f