6fb52f549efb231ebb379a2d8aa258474d1cbfb909fdcf92790a034a0c6cfeb4 | Triage

Analysis

max time kernel
119s
max time network
33s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
01-04-2023 18:34

Sharing

Report Analysis Logs

General

Target

tmp.exe
Size

3.2MB
MD5

598da2ba49ba58093682db45170ee497
SHA1

dc3410adc92264c34f9c5d348dbb206cc6b85dc0
SHA256

6fb52f549efb231ebb379a2d8aa258474d1cbfb909fdcf92790a034a0c6cfeb4
SHA512

79b5c7fc12e94c037c8debdef2d47e4a37535946ddbadef84cbebadd393ab9a06bf94bfbaba4553bcd7a2a5c19303c21a96001165feb9efe5dbe15a02ad4fdb8
SSDEEP

12288:aFkxHqaIryqap9KO9YtQO3S2YwXsACcyDuiGkMpx8uY/aHSK:a+xHK2OiUcMyDIjBHSK

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1980	tmp.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1980	tmp.exe
1980	tmp.exe

C:\Users\Admin\AppData\Local\Temp\tmp.exe
"C:\Users\Admin\AppData\Local\Temp\tmp.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1980

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads