Analysis

  • max time kernel
    135s
  • max time network
    142s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    04-06-2024 17:22

General

  • Target

    tabGame.exe

  • Size

    1.1MB

  • MD5

    60164a2e300f6d7b578eb9c2a7f836c9

  • SHA1

    c9701c83cd15af6e86548065a241de3665249ac8

  • SHA256

    80156e19ca74b927939dfbda4f70513fefa2ff4420b935fcd4064b7d9dcd66ee

  • SHA512

    700eabcdda7b21877d74c9bde2c43775bdf503c752c61b3256e25942527277001d7f0e6574706d09f1ebe5380cc7c9e0002ee7eeb99ce49867d56c4fbdc15860

  • SSDEEP

    24576:b4xuworsVZTL6MsFbnT0ZDPLucdI5p0FXH+tWO:W0T0Z/H25uFXH+tWO

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 20 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\tabGame.exe
    "C:\Users\Admin\AppData\Local\Temp\tabGame.exe"
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:1340

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1340-0-0x00000000000D0000-0x00000000000D1000-memory.dmp

    Filesize

    4KB

  • memory/1340-2-0x0000000002B70000-0x0000000002B71000-memory.dmp

    Filesize

    4KB

  • memory/1340-3-0x0000000002B80000-0x0000000002B81000-memory.dmp

    Filesize

    4KB

  • memory/1340-4-0x0000000002B90000-0x0000000002B91000-memory.dmp

    Filesize

    4KB

  • memory/1340-5-0x0000000002BA0000-0x0000000002BA1000-memory.dmp

    Filesize

    4KB

  • memory/1340-6-0x0000000002BB0000-0x0000000002BB1000-memory.dmp

    Filesize

    4KB

  • memory/1340-7-0x0000000002CC0000-0x0000000002CC1000-memory.dmp

    Filesize

    4KB

  • memory/1340-8-0x0000000002CD0000-0x0000000002CD1000-memory.dmp

    Filesize

    4KB

  • memory/1340-9-0x0000000002CE0000-0x0000000002CE1000-memory.dmp

    Filesize

    4KB

  • memory/1340-10-0x0000000002CF0000-0x0000000002CF1000-memory.dmp

    Filesize

    4KB

  • memory/1340-11-0x0000000002D00000-0x0000000002D01000-memory.dmp

    Filesize

    4KB

  • memory/1340-12-0x0000000002E10000-0x0000000002E11000-memory.dmp

    Filesize

    4KB

  • memory/1340-13-0x0000000002E60000-0x0000000002E61000-memory.dmp

    Filesize

    4KB

  • memory/1340-14-0x0000000002E70000-0x0000000002E71000-memory.dmp

    Filesize

    4KB

  • memory/1340-15-0x0000000002E80000-0x0000000002E81000-memory.dmp

    Filesize

    4KB

  • memory/1340-16-0x0000000002EE0000-0x0000000002EE1000-memory.dmp

    Filesize

    4KB

  • memory/1340-17-0x0000000002EF0000-0x0000000002EF1000-memory.dmp

    Filesize

    4KB

  • memory/1340-18-0x0000000003000000-0x0000000003001000-memory.dmp

    Filesize

    4KB

  • memory/1340-19-0x0000000003010000-0x0000000003011000-memory.dmp

    Filesize

    4KB

  • memory/1340-20-0x0000000003020000-0x0000000003021000-memory.dmp

    Filesize

    4KB

  • memory/1340-21-0x0000000003170000-0x0000000003171000-memory.dmp

    Filesize

    4KB

  • memory/1340-22-0x00000000000D0000-0x00000000000D1000-memory.dmp

    Filesize

    4KB