6218005fb331bd3a55d7fda89cb08aa3e5dfedf31ddc42a47b154ee4f1476ecc | Triage

Analysis

max time kernel
57s
max time network
61s
platform
windows10-1703_x64
resource
win10-20230220-en
resource tags

arch:x64arch:x86image:win10-20230220-enlocale:en-usos:windows10-1703-x64system
submitted
15-03-2023 23:36

Sharing

Report Analysis Logs

General

Target

Win2Talk.exe
Size

150KB
MD5

39780c341929dfa894e2fbb9c594134c
SHA1

473f0e40b9e65944fad5f0daf31d1873f550520f
SHA256

6218005fb331bd3a55d7fda89cb08aa3e5dfedf31ddc42a47b154ee4f1476ecc
SHA512

d207e07ad87f08e17a43bdea4a295777a76366b365b929a664843fd0cfb5e2e746285367e85c6c7f8f1e0a700551497a445493961a87399dd027c662b9adabbd
SSDEEP

3072:kImPrpYdrWouDUCzmUUvX2F6H8bl556m/x2eGSZe/4SSJI/E+qx6NXPQjDb:kImadKTZU96iE+qUNXPCb

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
2052	Win2Talk.exe
2052	Win2Talk.exe
2052	Win2Talk.exe
2052	Win2Talk.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2052	Win2Talk.exe

C:\Users\Admin\AppData\Local\Temp\Win2Talk.exe
"C:\Users\Admin\AppData\Local\Temp\Win2Talk.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
PID:2052

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads