ba9c8000ac307785c3e32297d772a53e0ccf6fab0e2a40930a465bce160e9d63 | Triage

Analysis

max time kernel
150s
max time network
156s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
13/05/2023, 22:55

Sharing

Report Analysis Logs

General

Target

P3.exe
Size

477KB
MD5

7b376db5825738e8ce251fe6ab9c3310
SHA1

ad2132e08ecbce1c7110f32b332e9da2a6f4127c
SHA256

ba9c8000ac307785c3e32297d772a53e0ccf6fab0e2a40930a465bce160e9d63
SHA512

e9165d4432a1b6ad7a4337a814f06b5fa9df8cada738089ecc14bb1a27cf040f8ad13c63f7301582fdec6fd0ba032e9a62fc91f1a61f0b2efc2c28cb2acda8b1
SSDEEP

12288:SX8/Vx65HCnDAByqulR1fZJQGs/Z87Rq:5/Vc5HCnDABMfZJQNZC

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1268	P3.exe

C:\Users\Admin\AppData\Local\Temp\P3.exe
"C:\Users\Admin\AppData\Local\Temp\P3.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1268

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\ProgramData\oxdligf\logs.dat

Filesize
144B

MD5
563fabb6ce356644f29850032aff2fa8

SHA1
3c77180f4d29988a98832d6467f883cafc598593

SHA256
735f7b3b61bf8e380ef6c1419a175b067ee0807a1630a8e85550d00faf8c86f0

SHA512
277664267ebfd24eeb307dc571b241d555cd89d515a0c9620d13d60968fbc47c054129116feb10e1e9e0d518d0dbf4b06beaea577161627cc9f4ac24a1fa40f3

Download Submit