736330aaa3a4683d3cc866153510763351a60062a236d22b12f4fe0f10853582 | Triage

Analysis

max time kernel
121s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
09-11-2022 08:23

Sharing

Report Analysis Logs

General

Target

csrss.exe
Size

1.0MB
MD5

9052d06c6ac53471f8496263f8fef2eb
SHA1

73016558c8353509b15cd757063816369e9abfa7
SHA256

736330aaa3a4683d3cc866153510763351a60062a236d22b12f4fe0f10853582
SHA512

84837f8c708a8e51fcc611c3035c5676ff527d5b132398d935c77ac737035bef9c27dd6010188d6c96b7d1b02ff8dc41a3f50c487f42348bd0f3d016164fa7fc
SSDEEP

24576:HnYO/xJrstd2u3Slcfo259gy6Ym4ZrpdSdwwDtrm83zh:dbst4u3vA2PgTqpdSdvDtrm+zh

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

csrss.exe

pid process

884 csrss.exe

C:\Users\Admin\AppData\Local\Temp\csrss.exe
"C:\Users\Admin\AppData\Local\Temp\csrss.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:884

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads