Analysis
-
max time kernel
140s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
05/09/2024, 15:56
Static task
static1
Behavioral task
behavioral1
Sample
XOutput.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
XOutput.exe
Resource
win10v2004-20240802-en
General
-
Target
XOutput.exe
-
Size
2.2MB
-
MD5
250844b8abb064b491296026467eeb71
-
SHA1
def2c93459a4f5481139647095b3866be985e2e9
-
SHA256
5768f80c72d36e90d3213614279c4ea0fe15abff28870bb64861aa42f90f6673
-
SHA512
ec8702598b1c1891fd54274e2cd58ab247f816ef1bab5bb5969e066601df9cad6af089485ca08e7dcbab0ec3ca81825b0193356a1e1fe18e2c000483a1c022f1
-
SSDEEP
24576:rRAPggD7PIEjR4xq7iiXTK7D3So9AIB+j3pSo2UXuwwpSDBsRhxA/bSInQivEHCn:kL70XWIB+jZkwwpSqRDA/+FOGCn
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 2516 XOutput.exe -
Suspicious use of FindShellTrayWindow 4 IoCs
pid Process 2516 XOutput.exe 2516 XOutput.exe 2516 XOutput.exe 2516 XOutput.exe -
Suspicious use of SendNotifyMessage 4 IoCs
pid Process 2516 XOutput.exe 2516 XOutput.exe 2516 XOutput.exe 2516 XOutput.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2516 XOutput.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
307KB
MD540e1edb55ec4db991440c45f723a14d6
SHA15797f1922984b684b73e2363d8573049237445e4
SHA256966e579ad8224ca87ae78a8788c5eb0c33ecb932dcc6ca25c39871e20b97a15a
SHA512c99e4016374203f29f75132afd5f42cecceb50a5b45a33bddb1bc60b4d3b196c6ebaa1dba12f8e1bff2c95bf83518a12bf25d659d634c5a33445445d8246e178