Analysis

  • max time kernel
    23s
  • max time network
    17s
  • platform
    windows7_x64
  • resource
    win7-20241023-en
  • resource tags

    arch:x64arch:x86image:win7-20241023-enlocale:en-usos:windows7-x64system
  • submitted
    30-11-2024 05:07

General

  • Target

    e$EXEFILE.exe

  • Size

    624KB

  • MD5

    8b91908378b93e3a45ec01662928027d

  • SHA1

    0362f9e83e55c9bb68c3b51bc01d3a984dda1e74

  • SHA256

    5107a069f76ea6a2ffde6ae4adafa3c2ebcee7e12c5f2ee96e8000a0a9dc0ad3

  • SHA512

    98f731f31088430f4470ac810d5dd9d6a779c67422e8a84e440f993af1c1d5d9b68073314cbe81cc7474e9062f834fe1152d389431b25b26dce6c4cb5ac46371

  • SSDEEP

    12288:6yKzyPJNE/2DtVI5siaEhYqaf/+CGPFP2XKOwLql:QeatBhYqaepVOwLq

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e$EXEFILE.exe
    "C:\Users\Admin\AppData\Local\Temp\e$EXEFILE.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2908

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2908-0-0x000007FEF69BE000-0x000007FEF69BF000-memory.dmp

    Filesize

    4KB

  • memory/2908-1-0x0000000000580000-0x000000000058A000-memory.dmp

    Filesize

    40KB

  • memory/2908-2-0x000007FEF6700000-0x000007FEF709D000-memory.dmp

    Filesize

    9.6MB

  • memory/2908-3-0x000007FEF6700000-0x000007FEF709D000-memory.dmp

    Filesize

    9.6MB

  • memory/2908-5-0x000007FEF6700000-0x000007FEF709D000-memory.dmp

    Filesize

    9.6MB

  • memory/2908-4-0x000007FEF6700000-0x000007FEF709D000-memory.dmp

    Filesize

    9.6MB

  • memory/2908-6-0x000007FEF6700000-0x000007FEF709D000-memory.dmp

    Filesize

    9.6MB

  • memory/2908-7-0x000007FEF6700000-0x000007FEF709D000-memory.dmp

    Filesize

    9.6MB

  • memory/2908-8-0x000007FEF69BE000-0x000007FEF69BF000-memory.dmp

    Filesize

    4KB

  • memory/2908-10-0x000007FEF6700000-0x000007FEF709D000-memory.dmp

    Filesize

    9.6MB

  • memory/2908-11-0x000007FEF6700000-0x000007FEF709D000-memory.dmp

    Filesize

    9.6MB