Analysis

  • max time kernel
    91s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-11-2022 21:18

General

  • Target

    6cbd2b96e6604aca8bdceb235f20003d4dc3d0c9fff2771869ec6795687ae80c.exe

  • Size

    689KB

  • MD5

    5561b1cdacdf599b7721446a5e904257

  • SHA1

    7565017cfc2de0482ae7e83acdd1c541457d72e4

  • SHA256

    6cbd2b96e6604aca8bdceb235f20003d4dc3d0c9fff2771869ec6795687ae80c

  • SHA512

    91606f481dbfbbca41ca414e33d73d38e0a9fe4dcff66625d20f2ff739d31600767c15c90876681c1c998c306c5d710865e8b211978538cace72136993907655

  • SSDEEP

    12288:BWB75grHXqvGIX1Nn+GjERFqkSEOKF3Z4mxxdoEtlK+kt9T2MG:GmW+8Nn+GjER4kSzKQmXOG7

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6cbd2b96e6604aca8bdceb235f20003d4dc3d0c9fff2771869ec6795687ae80c.exe
    "C:\Users\Admin\AppData\Local\Temp\6cbd2b96e6604aca8bdceb235f20003d4dc3d0c9fff2771869ec6795687ae80c.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:5080

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/5080-132-0x0000000000400000-0x0000000000695000-memory.dmp

    Filesize

    2.6MB

  • memory/5080-133-0x00000000030D0000-0x0000000003124000-memory.dmp

    Filesize

    336KB

  • memory/5080-134-0x0000000005A20000-0x0000000005A24000-memory.dmp

    Filesize

    16KB

  • memory/5080-135-0x0000000000400000-0x0000000000695000-memory.dmp

    Filesize

    2.6MB

  • memory/5080-136-0x00000000030D0000-0x0000000003124000-memory.dmp

    Filesize

    336KB