Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
24/05/2024, 17:33
General
-
Target
0c8d6d6a7b983f873365efc14647ede0a25ae3e98a4a94d34c5737325dba56e0.exe
-
Size
1.4MB
-
MD5
ef09ca007ed27dd7fa940d6b18c0b525
-
SHA1
70ec636406ca4da11e85185e3ab9e35bc89d10ab
-
SHA256
0c8d6d6a7b983f873365efc14647ede0a25ae3e98a4a94d34c5737325dba56e0
-
SHA512
03c5b38fd88b1cbedf90a7ec19146380327104a168158b5f53bcedcf8600299772f19282590cb0f5a4cfde5856763272ddba5dba5519e1e6dc5fb9bf12a7b365
-
SSDEEP
24576:+5heVmBTUyxNmvmLF0/1fGatm7VDMb+Ld3n0BdSb2LToRgbECJp2:+5heiTUyxNmuLKZGatWVDMon0BdSCTHC
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0c8d6d6a7b983f873365efc14647ede0a25ae3e98a4a94d34c5737325dba56e0.exe"C:\Users\Admin\AppData\Local\Temp\0c8d6d6a7b983f873365efc14647ede0a25ae3e98a4a94d34c5737325dba56e0.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\YShow3D.exeC:\Users\Admin\AppData\Local\Temp\\YShow3D.exe /i ÕÒ²»µ½Ö¸¶¨µÄ¼ÓÃÜËø£¡ /t ÌáʾÐÅÏ¢£º /k 162⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
326KB
MD5114c2e0034f2d2da14586526a76c0bc0
SHA15d9becc3a719bb168d878c4cf08881ea01a9a2f1
SHA2568d7879d12460fb0af03ad5c720bf2e68cd02485a4cbf1e8d7bbf645d47da55e7
SHA512b3563422d2e6c30864ce62e120b384b42ada0dbff1f0ebbb6115518d13a93717006094f2901af77f55f5d3742ae9571b9cc9d23ea8412ae07e6b012ce5ec64e3
-
Filesize
1.0MB