Analysis

  • max time kernel
    93s
  • max time network
    94s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/11/2024, 05:49

General

  • Target

    ddd5af11992726fa6113492620cd77b6996b4437651c133e7c6229bf5d24f5fd.exe

  • Size

    2.9MB

  • MD5

    f46f568146e9ed3ff35027fbfe477a85

  • SHA1

    83b26ce8514f168d43178dc7d536acf1aa11aab5

  • SHA256

    ddd5af11992726fa6113492620cd77b6996b4437651c133e7c6229bf5d24f5fd

  • SHA512

    1e08c7409bab34b9c495bc02ce156a7988ae5668c019264f89e90e4a9d8d7814a3077515fe66c38c938705232de278b3c76ca61e4465710c39a0ff700833ff73

  • SSDEEP

    49152:RIwpqrjWnZQKtdwzY5LjmbTGnAr3OA96iN/ixTwazuZbi:RI9WnZQKEzY5LjwKAr3tKuZW

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ddd5af11992726fa6113492620cd77b6996b4437651c133e7c6229bf5d24f5fd.exe
    "C:\Users\Admin\AppData\Local\Temp\ddd5af11992726fa6113492620cd77b6996b4437651c133e7c6229bf5d24f5fd.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of SetWindowsHookEx
    PID:836

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\mwaBA28.tmp

    Filesize

    161KB

    MD5

    662de59677aecac08c7f75f978c399da

    SHA1

    1f85d6be1fa846e4bc90f7a29540466cf3422d24

    SHA256

    1f5a798dde9e1b02979767e35f120d0c669064b9460c267fb5f007c290e3dceb

    SHA512

    e1186c3b3862d897d9b368da1b2964dba24a3a8c41de8bb5f86c503a0717df75a1c89651c5157252c94e2ab47ce1841183f5dde4c3a1e5f96cb471bf20b3fdd0