13e6ff5cb9fdf2ba6560edda8afa17724d14122dd087af29004c7684cb6c4252 | Triage

Analysis

max time kernel
152s
max time network
172s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 13:34

Sharing

Report Analysis Logs

General

Target

37de64b99682484279f81911840da0e9.exe
Size

700KB
MD5

37de64b99682484279f81911840da0e9
SHA1

77508881129ba06fcc0f99633900cb25d17f2e19
SHA256

13e6ff5cb9fdf2ba6560edda8afa17724d14122dd087af29004c7684cb6c4252
SHA512

73df3a16038fe07126e8b39da5f2e88170d3e312890f25d5f2d371bbcaab516bb5b25220d5ff4e2bd5bade5c343136b0893e8304927c865fadd71f0a50e230b4
SSDEEP

12288:LjuRRtahe+F+8OxQa3FxvNW5RtAlwc3hr6xkH:LqRTao+cxLVpCRtUwckxm

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes:

37de64b99682484279f81911840da0e9.exe

pid process

672 37de64b99682484279f81911840da0e9.exe
672 37de64b99682484279f81911840da0e9.exe
Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

37de64b99682484279f81911840da0e9.exe

pid process

672 37de64b99682484279f81911840da0e9.exe
672 37de64b99682484279f81911840da0e9.exe

C:\Users\Admin\AppData\Local\Temp\37de64b99682484279f81911840da0e9.exe
"C:\Users\Admin\AppData\Local\Temp\37de64b99682484279f81911840da0e9.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:672

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads