Analysis

  • max time kernel
    121s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    19-09-2024 02:27

General

  • Target

    Proxy Checker v0.2/._cache_Proxy Checker v0.2 By X-SLAYER.exe

  • Size

    1.4MB

  • MD5

    6d0fc4a87660eb12e4748e3b38b26879

  • SHA1

    a780cc0f3feb7cdfb09051a18dd102b9ab111ff1

  • SHA256

    5d9a4b3353659a3e88b520ec6b2a9d461bcbf8866a37dde649a416f7532a30d4

  • SHA512

    a413451a621f8df7f7256ea96695459d3e7f4963863523329e483850fa94569ec97e247ba614aff7416c678e270c0dbe282bff18be0dac057176fc964178f903

  • SSDEEP

    24576:+Wjq2at06twERDImb+2dnTLcb24EgU1oAtwERD:+T/t/GERDN+2VsjnAGERD

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 16 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Proxy Checker v0.2\._cache_Proxy Checker v0.2 By X-SLAYER.exe
    "C:\Users\Admin\AppData\Local\Temp\Proxy Checker v0.2\._cache_Proxy Checker v0.2 By X-SLAYER.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2856

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • \Users\Admin\AppData\Local\SkinSoft\VisualStyler\2.3.5.0\x64\ssapihook.dll

    Filesize

    66KB

    MD5

    c74d260d388f5ac3d95d8c1c3a27c989

    SHA1

    5da009086036004a7c670d608d5e1e923aead568

    SHA256

    dc1bebb8ce88d59e4b3130c1ff2c4b7f5df2701c7a71b476b8a6f2ed541db628

    SHA512

    6460db8f73806017d267c0e4e112902956a3bc53853c6a893cff66fe44772305b2c158ef8b58e993806d713aceaddcf2efa7ccf625063678444d3fd20b10546a

  • memory/2856-15-0x0000000002450000-0x0000000002451000-memory.dmp

    Filesize

    4KB

  • memory/2856-5-0x000007FEF5450000-0x000007FEF5E3C000-memory.dmp

    Filesize

    9.9MB

  • memory/2856-16-0x000000001A970000-0x000000001A971000-memory.dmp

    Filesize

    4KB

  • memory/2856-4-0x000000001B3A0000-0x000000001B498000-memory.dmp

    Filesize

    992KB

  • memory/2856-17-0x000000001A980000-0x000000001A981000-memory.dmp

    Filesize

    4KB

  • memory/2856-1-0x0000000000C40000-0x0000000000DA8000-memory.dmp

    Filesize

    1.4MB

  • memory/2856-10-0x00000000023F0000-0x00000000023F1000-memory.dmp

    Filesize

    4KB

  • memory/2856-18-0x000000001A990000-0x000000001A991000-memory.dmp

    Filesize

    4KB

  • memory/2856-12-0x0000000002410000-0x0000000002411000-memory.dmp

    Filesize

    4KB

  • memory/2856-13-0x0000000002420000-0x0000000002421000-memory.dmp

    Filesize

    4KB

  • memory/2856-14-0x0000000002430000-0x0000000002431000-memory.dmp

    Filesize

    4KB

  • memory/2856-0-0x000007FEF5453000-0x000007FEF5454000-memory.dmp

    Filesize

    4KB

  • memory/2856-3-0x00000000003F0000-0x0000000000414000-memory.dmp

    Filesize

    144KB

  • memory/2856-2-0x000007FEF5450000-0x000007FEF5E3C000-memory.dmp

    Filesize

    9.9MB

  • memory/2856-11-0x0000000002400000-0x0000000002401000-memory.dmp

    Filesize

    4KB

  • memory/2856-19-0x000000001A9A0000-0x000000001A9A1000-memory.dmp

    Filesize

    4KB

  • memory/2856-20-0x000000001AAB0000-0x000000001AAB1000-memory.dmp

    Filesize

    4KB

  • memory/2856-21-0x000000001AAC0000-0x000000001AAC1000-memory.dmp

    Filesize

    4KB

  • memory/2856-22-0x000000001AAD0000-0x000000001AAD1000-memory.dmp

    Filesize

    4KB

  • memory/2856-25-0x000007FE7B6F0000-0x000007FE7B6F1000-memory.dmp

    Filesize

    4KB

  • memory/2856-24-0x000007FE7B6E0000-0x000007FE7B6E1000-memory.dmp

    Filesize

    4KB

  • memory/2856-23-0x000007FE7B6B0000-0x000007FE7B6B1000-memory.dmp

    Filesize

    4KB

  • memory/2856-26-0x000007FEF5450000-0x000007FEF5E3C000-memory.dmp

    Filesize

    9.9MB

  • memory/2856-27-0x000007FEF5453000-0x000007FEF5454000-memory.dmp

    Filesize

    4KB

  • memory/2856-28-0x000007FEF5450000-0x000007FEF5E3C000-memory.dmp

    Filesize

    9.9MB