Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
-
submitted
07-06-2024 08:05
General
-
Target
d8657e5d5c8f96fc0ddc912e9f0de82c14ff36cea078ffb3f797f1b1cd00ebd5.exe
-
Size
87KB
-
MD5
62d620e6c6685f4a31744eccdc506cec
-
SHA1
9cbe719874b54b499dd38039a9aa6a885cb2e12e
-
SHA256
d8657e5d5c8f96fc0ddc912e9f0de82c14ff36cea078ffb3f797f1b1cd00ebd5
-
SHA512
98cd40a67d84c427afe569870228f3d795c48858418eccde80898e881be29a6f6a07d61d0b1a2236fe87685fba4461508f315c68447f384391c5d8eee2038c8c
-
SSDEEP
1536:NDj2d6rnJbJnJBSX1nV1b1N1Il1k1YFI1x1J1MuEqx517Q/1T1Jzct01Nsqnl1RY:FlnnJBSX1nV1b1N1Il1k1YFI1x1J1Mu7
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Drops file in Windows directory 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d8657e5d5c8f96fc0ddc912e9f0de82c14ff36cea078ffb3f797f1b1cd00ebd5.exe"C:\Users\Admin\AppData\Local\Temp\d8657e5d5c8f96fc0ddc912e9f0de82c14ff36cea078ffb3f797f1b1cd00ebd5.exe"1⤵
- Adds Run key to start application
- Drops file in Windows directory
- Suspicious use of WriteProcessMemory
-
C:\Windows\microsofthelp.exe"C:\Windows\microsofthelp.exe"2⤵
- Deletes itself
- Executes dropped EXE
- Drops file in Windows directory
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
88KB
MD53b1dacc35614c4b623d0d2361fe643dd
SHA134189b83ed189e2c50e8682a3d67acf754c52d08
SHA25683e0912e4cdc3b73111c378c5304f83d82b3cd0a542236e6b934fe84262f7a54
SHA5129b4e8cf3a1e16b60c889d085ffc7302f99fb4f5447822ab0a54b5d57ae472c972c136a386dc5c89976dd9be7c8b7fe5265e65e33749bee29f0cc44c1842b8e97
-
Filesize
48KB
-
Filesize
48KB
-
Filesize
48KB
-
Filesize
48KB
-
Filesize
48KB
-
Filesize
20KB
-
Filesize
48KB