Analysis

  • max time kernel
    150s
  • max time network
    170s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27/11/2022, 21:34

General

  • Target

    Csrsrv.OCX.exe

  • Size

    40KB

  • MD5

    86a4504ac7222a34d58f9153c806de3f

  • SHA1

    35a53704bf8464746b350d8bceccecb61851d02f

  • SHA256

    da5d307505b4cb3b89d12ce6723713e702bed7705428d1e5df786efea052e1f3

  • SHA512

    50d9a31a976edffaa5ff7fd3d01ba26b7ba0fae6539f21bde52bd155e7a81773eb8beb9e05ae6467ab2bcc193813d0f74ae2c8672822e636eb3d06150ccc6975

  • SSDEEP

    768:ATI+fOM1iMszz14yEUIr/WMsOfOM1QtT:6ICOM+a/ROMmZ

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Csrsrv.OCX.exe
    "C:\Users\Admin\AppData\Local\Temp\Csrsrv.OCX.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4988

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/4988-134-0x0000000010000000-0x0000000010057000-memory.dmp

          Filesize

          348KB