Analysis

  • max time kernel
    104s
  • max time network
    105s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/09/2024, 09:47

General

  • Target

    $EXEFILE.exe

  • Size

    241KB

  • MD5

    769858b9a9534fc44facc07a274913b7

  • SHA1

    acdfca23cf3cab7415cd4d678fce8628203e9a7a

  • SHA256

    06d8ecd88f5699aee559724003203566510b19c77d45c4c450c2bc50aa945622

  • SHA512

    47e19fe8a35665391241b8296c179495030c75934a7e5fc98a63f487a28964d9a244f90a7ce7693800018f6451b378f95ac110879f7b4de72db0581eee6f2829

  • SSDEEP

    3072:sfgMQJ7OFExkU0UJiwM6EWBqcjDQtoQ/pfMmI7ObPhV7q:OxQZOF0kU0FwFZjDQtv86bPh

Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\$EXEFILE.exe
    "C:\Users\Admin\AppData\Local\Temp\$EXEFILE.exe"
    1⤵
    • Drops file in Windows directory
    • Suspicious use of SetWindowsHookEx
    PID:920

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/920-0-0x00007FF999815000-0x00007FF999816000-memory.dmp

    Filesize

    4KB

  • memory/920-1-0x00007FF999560000-0x00007FF999F01000-memory.dmp

    Filesize

    9.6MB

  • memory/920-2-0x0000000000CF0000-0x0000000000CFC000-memory.dmp

    Filesize

    48KB

  • memory/920-3-0x00007FF999560000-0x00007FF999F01000-memory.dmp

    Filesize

    9.6MB

  • memory/920-4-0x000000001BA40000-0x000000001BF0E000-memory.dmp

    Filesize

    4.8MB

  • memory/920-5-0x000000001BFB0000-0x000000001C04C000-memory.dmp

    Filesize

    624KB

  • memory/920-6-0x0000000000D60000-0x0000000000D68000-memory.dmp

    Filesize

    32KB

  • memory/920-7-0x00007FF999560000-0x00007FF999F01000-memory.dmp

    Filesize

    9.6MB

  • memory/920-8-0x00007FF999560000-0x00007FF999F01000-memory.dmp

    Filesize

    9.6MB

  • memory/920-9-0x00007FF999560000-0x00007FF999F01000-memory.dmp

    Filesize

    9.6MB

  • memory/920-10-0x00007FF999815000-0x00007FF999816000-memory.dmp

    Filesize

    4KB

  • memory/920-11-0x00007FF999560000-0x00007FF999F01000-memory.dmp

    Filesize

    9.6MB

  • memory/920-18-0x00007FF999560000-0x00007FF999F01000-memory.dmp

    Filesize

    9.6MB