6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b

Analysis

max time kernel
148s
max time network
125s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
24/05/2024, 10:12

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
Size

10.1MB
MD5

c320cf14765a77e0af78dce76aaa22c7
SHA1

89446cb05f20d4a4170800ca73bfa5c3343b4e7b
SHA256

6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b
SHA512

7382dc44d96a047541ab3c4800ec33c94c4fab97f9d188b0e770e10c086ae4fdef2cfa2ab8231ff4fe73b9f287c07f534ad5f3856ca96f0f0e9a65e703709e19
SSDEEP

196608:CgvE0DOFSW+0ogdqKh70izfsInVJ9Lma1RdvodC9lEeBz9u2scEdgo:CqC9+0Ck7jsEVJwaPdbA2sbj

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
1284	6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe

C:\Users\Admin\AppData\Local\Temp\6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe
"C:\Users\Admin\AppData\Local\Temp\6ecc126cbfb4e1813cb975d717550fe1659888ec4a1089135464bd909158b52b.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:1284

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1284-35-0x0000000000370000-0x0000000000371000-memory.dmp

Filesize
4KB

Download
memory/1284-33-0x0000000000370000-0x0000000000371000-memory.dmp

Filesize
4KB

Download
memory/1284-30-0x0000000000360000-0x0000000000361000-memory.dmp

Filesize
4KB

Download
memory/1284-28-0x0000000000360000-0x0000000000361000-memory.dmp

Filesize
4KB

Download
memory/1284-25-0x0000000000350000-0x0000000000351000-memory.dmp

Filesize
4KB

Download
memory/1284-23-0x0000000000350000-0x0000000000351000-memory.dmp

Filesize
4KB

Download
memory/1284-20-0x0000000000340000-0x0000000000341000-memory.dmp

Filesize
4KB

Download
memory/1284-18-0x0000000000340000-0x0000000000341000-memory.dmp

Filesize
4KB

Download
memory/1284-15-0x00000000002F0000-0x00000000002F1000-memory.dmp

Filesize
4KB

Download
memory/1284-13-0x00000000002F0000-0x00000000002F1000-memory.dmp

Filesize
4KB

Download
memory/1284-11-0x00000000002F0000-0x00000000002F1000-memory.dmp

Filesize
4KB

Download
memory/1284-10-0x00000000009E3000-0x0000000000FC6000-memory.dmp

Filesize
5.9MB

Download
memory/1284-9-0x00000000002E0000-0x00000000002E1000-memory.dmp

Filesize
4KB

Download
memory/1284-7-0x00000000002E0000-0x00000000002E1000-memory.dmp

Filesize
4KB

Download
memory/1284-5-0x00000000002E0000-0x00000000002E1000-memory.dmp

Filesize
4KB

Download
memory/1284-4-0x0000000000240000-0x0000000000241000-memory.dmp

Filesize
4KB

Download
memory/1284-2-0x0000000000240000-0x0000000000241000-memory.dmp

Filesize
4KB

Download
memory/1284-0-0x0000000000240000-0x0000000000241000-memory.dmp

Filesize
4KB

Download
memory/1284-39-0x0000000000400000-0x00000000019E4000-memory.dmp

Filesize
21.9MB

Download
memory/1284-40-0x0000000000400000-0x00000000019E4000-memory.dmp

Filesize
21.9MB

Download
memory/1284-59-0x00000000009E3000-0x0000000000FC6000-memory.dmp

Filesize
5.9MB

Download
memory/1284-60-0x0000000000400000-0x00000000019E4000-memory.dmp

Filesize
21.9MB

Download
memory/1284-61-0x0000000000400000-0x00000000019E4000-memory.dmp

Filesize
21.9MB

Download