5bf2371e6060d92260ca09443dd11d332e18a68c5f2995840ae424874ab090b4

Analysis

max time kernel
132s
max time network
144s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
26-05-2024 04:58

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

5bf2371e6060d92260ca09443dd11d332e18a68c5f2995840ae424874ab090b4.exe
Size

11.9MB
MD5

9e8179d7cc3a19b00071f78a9e8bd735
SHA1

c42fbf5f8414758272008ac8f86e1ef3be4c1bdb
SHA256

5bf2371e6060d92260ca09443dd11d332e18a68c5f2995840ae424874ab090b4
SHA512

311772ea09626de8d57caa35c66beb217101358c0a83e573dbe0550db40b8cd0110b8d90c71b11d022f9db3deefe68c331028e305ab895328c054da7bd6d3fc6
SSDEEP

196608:6a2hXvqVBopwshSdluFBAys1kNVEAzUrhVwNCjpUPRt/EV5wvn14Q5Pn5ftaVxBn:6vvcGiASdY59z0sypUPRREVytpPn5fMl

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes:

5bf2371e6060d92260ca09443dd11d332e18a68c5f2995840ae424874ab090b4.exe

pid process

2884 5bf2371e6060d92260ca09443dd11d332e18a68c5f2995840ae424874ab090b4.exe

Suspicious use of SetWindowsHookEx 5 IoCs

Processes:

5bf2371e6060d92260ca09443dd11d332e18a68c5f2995840ae424874ab090b4.exe

pid	process
2884	5bf2371e6060d92260ca09443dd11d332e18a68c5f2995840ae424874ab090b4.exe
2884	5bf2371e6060d92260ca09443dd11d332e18a68c5f2995840ae424874ab090b4.exe
2884	5bf2371e6060d92260ca09443dd11d332e18a68c5f2995840ae424874ab090b4.exe
2884	5bf2371e6060d92260ca09443dd11d332e18a68c5f2995840ae424874ab090b4.exe
2884	5bf2371e6060d92260ca09443dd11d332e18a68c5f2995840ae424874ab090b4.exe

C:\Users\Admin\AppData\Local\Temp\5bf2371e6060d92260ca09443dd11d332e18a68c5f2995840ae424874ab090b4.exe
"C:\Users\Admin\AppData\Local\Temp\5bf2371e6060d92260ca09443dd11d332e18a68c5f2995840ae424874ab090b4.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:2884

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2884-0-0x0000000000400000-0x00000000020E1000-memory.dmp

Filesize
28.9MB

Download
memory/2884-36-0x0000000000320000-0x0000000000321000-memory.dmp

Filesize
4KB

Download
memory/2884-34-0x0000000000320000-0x0000000000321000-memory.dmp

Filesize
4KB

Download
memory/2884-31-0x0000000000290000-0x0000000000291000-memory.dmp

Filesize
4KB

Download
memory/2884-29-0x0000000000290000-0x0000000000291000-memory.dmp

Filesize
4KB

Download
memory/2884-26-0x0000000000280000-0x0000000000281000-memory.dmp

Filesize
4KB

Download
memory/2884-24-0x0000000000280000-0x0000000000281000-memory.dmp

Filesize
4KB

Download
memory/2884-42-0x0000000000400000-0x00000000020E1000-memory.dmp

Filesize
28.9MB

Download
memory/2884-21-0x0000000000270000-0x0000000000271000-memory.dmp

Filesize
4KB

Download
memory/2884-19-0x0000000000270000-0x0000000000271000-memory.dmp

Filesize
4KB

Download
memory/2884-16-0x0000000000260000-0x0000000000261000-memory.dmp

Filesize
4KB

Download
memory/2884-14-0x0000000000260000-0x0000000000261000-memory.dmp

Filesize
4KB

Download
memory/2884-12-0x0000000000260000-0x0000000000261000-memory.dmp

Filesize
4KB

Download
memory/2884-11-0x0000000000250000-0x0000000000251000-memory.dmp

Filesize
4KB

Download
memory/2884-9-0x0000000000250000-0x0000000000251000-memory.dmp

Filesize
4KB

Download
memory/2884-7-0x0000000000250000-0x0000000000251000-memory.dmp

Filesize
4KB

Download
memory/2884-6-0x0000000000230000-0x0000000000231000-memory.dmp

Filesize
4KB

Download
memory/2884-4-0x0000000000230000-0x0000000000231000-memory.dmp

Filesize
4KB

Download
memory/2884-2-0x0000000000230000-0x0000000000231000-memory.dmp

Filesize
4KB

Download
memory/2884-1-0x0000000001106000-0x00000000014FA000-memory.dmp

Filesize
4.0MB

Download
memory/2884-43-0x0000000000400000-0x00000000020E1000-memory.dmp

Filesize
28.9MB

Download
memory/2884-44-0x0000000001106000-0x00000000014FA000-memory.dmp

Filesize
4.0MB

Download