Analysis

  • max time kernel
    141s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22-02-2023 21:17

General

  • Target

    3381df0acd45f0f31b1f411a84c95400e55d8fd08fba80bded48fdbb61011b0f.exe

  • Size

    2.7MB

  • MD5

    eb8c94c73da285a39510970178f1a2c1

  • SHA1

    bce09e05052e0c91226205f64aabb2b8350c852e

  • SHA256

    3381df0acd45f0f31b1f411a84c95400e55d8fd08fba80bded48fdbb61011b0f

  • SHA512

    cfe53b42755cf5b0a2103a06d059544ea81a6adff724001c13b0e0c1ad7dd7c20c445406d014f8d9e0c0e6d2e2fc9c02472c40b27eacbf726453678d34eacdbb

  • SSDEEP

    49152:uPB8aovV5IGrkciRLMrwHVTknAN+jHO7gsXc07hfiUWo5MM2pWFRyuYAhMTIEG3g:uPB7ocGhiRor+TBN+juksXhlhpq4DYAs

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3381df0acd45f0f31b1f411a84c95400e55d8fd08fba80bded48fdbb61011b0f.exe
    "C:\Users\Admin\AppData\Local\Temp\3381df0acd45f0f31b1f411a84c95400e55d8fd08fba80bded48fdbb61011b0f.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1588

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1588-133-0x0000000000400000-0x0000000001415000-memory.dmp
    Filesize

    16.1MB

  • memory/1588-134-0x0000000000400000-0x0000000001415000-memory.dmp
    Filesize

    16.1MB

  • memory/1588-135-0x0000000000400000-0x0000000001415000-memory.dmp
    Filesize

    16.1MB

  • memory/1588-136-0x0000000000400000-0x0000000001415000-memory.dmp
    Filesize

    16.1MB

  • memory/1588-137-0x0000000000400000-0x0000000001415000-memory.dmp
    Filesize

    16.1MB

  • memory/1588-138-0x00000000016F0000-0x00000000016F1000-memory.dmp
    Filesize

    4KB

  • memory/1588-139-0x0000000000400000-0x0000000001415000-memory.dmp
    Filesize

    16.1MB

  • memory/1588-141-0x0000000000400000-0x0000000001415000-memory.dmp
    Filesize

    16.1MB

  • memory/1588-142-0x00000000016F0000-0x00000000016F1000-memory.dmp
    Filesize

    4KB