Analysis

  • max time kernel
    5s
  • max time network
    93s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/10/2022, 21:57

General

  • Target

    194b5a1b9b59b72bdc812341178c8fd2cfda256e199b19936d0122e3f8598f18.exe

  • Size

    84KB

  • MD5

    0c5128c21d0c67bd6d48f71877960300

  • SHA1

    60845650b033ea94df071102c8891b98c38668e8

  • SHA256

    194b5a1b9b59b72bdc812341178c8fd2cfda256e199b19936d0122e3f8598f18

  • SHA512

    5c7eb06c538b0538fe0633c441bd79882131d702ec57902120e62138ee0e66c51f20ae853a6f0b355282e05beec88277b900f974ab2fda20c38597257a7df58a

  • SSDEEP

    768:d6fmuec4OdJNUC1x2avPPpykILkGuIBLP3nqZCcLX/CVSFJ0T72Uap5/7TONS9:d/ZOdUCJwVuTocTzFJ0T72VpN9

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\194b5a1b9b59b72bdc812341178c8fd2cfda256e199b19936d0122e3f8598f18.exe
    "C:\Users\Admin\AppData\Local\Temp\194b5a1b9b59b72bdc812341178c8fd2cfda256e199b19936d0122e3f8598f18.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:848
    • C:\Users\Admin\liayao.exe
      "C:\Users\Admin\liayao.exe"
      2⤵
        PID:3464

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\liayao.exe

      Filesize

      19KB

      MD5

      9779ea06feaf9974856e91b28e477138

      SHA1

      7a2ccbc51fcfabe80524edbe4419dae57f17171b

      SHA256

      3fb06e516f85243288850d4c6c3de16a77cdb6215505a29df2da6cc4540336ce

      SHA512

      9109f99e1760ae9d5d079bf74409ecc2d29312b4d46cd8aea2340aa8fdea20283130c94472ead969cb098b9bb5e5cf16f2a85ed022a6a0af3865b543ee6a9983

    • C:\Users\Admin\liayao.exe

      Filesize

      32KB

      MD5

      ee4f66134eecc34daa5ac1f6e6c658fd

      SHA1

      ebff2ffd6f73feb2cb182f27a89335362024c986

      SHA256

      6b7bcd1431b2dc56d9cc713853e957586732a19e93dc1738487dd2ee7be34930

      SHA512

      06f6942f822a563e4dc36b0a31d9a1e6f19f7dc02f7b50f48e7544cb109f88f0d720852c163fd9b5dd943bc9c3f8f0f905903e12bcd0406a133d58af96e0c2b1