3921c96ee71d9f7271c2d256958bdfc2c1081d9e3d5149f035635e0421253892 | Triage

Analysis

max time kernel
18s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
02-02-2023 01:59

Sharing

Report Analysis Logs

General

Target

Keygen.exe
Size

69KB
MD5

8a8a0d8aa60c7529753089dfd1d7d8a5
SHA1

a129fca9b5a7cff9a586f6dc7931b79c7f53b373
SHA256

3921c96ee71d9f7271c2d256958bdfc2c1081d9e3d5149f035635e0421253892
SHA512

b6874ed1569e6d9434e5924f2bf80645e878b4b2680d2f5bf30821e15edf149510bee14b0420a218ffb6f4619cdee06154ed72a474d8a8682d814ee7281a81ac
SSDEEP

1536:m6UzoyE5BIKEJRjZa7NdUYDg/JrE1Uw7UI:TU8ycaKEJRdkTNYJrnw7

Score

1^/10

Malware Config

Signatures

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1436	Keygen.exe

C:\Users\Admin\AppData\Local\Temp\Keygen.exe
"C:\Users\Admin\AppData\Local\Temp\Keygen.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:1436

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1436-54-0x0000000075601000-0x0000000075603000-memory.dmp

Filesize
8KB

Download
memory/1436-55-0x0000000000400000-0x0000000000419710-memory.dmp

Filesize
101KB

Download