ba9c8000ac307785c3e32297d772a53e0ccf6fab0e2a40930a465bce160e9d63 | Triage

Analysis

max time kernel
149s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
13/05/2023, 22:55

Sharing

Report Analysis Logs

General

Target

P3.exe
Size

477KB
MD5

7b376db5825738e8ce251fe6ab9c3310
SHA1

ad2132e08ecbce1c7110f32b332e9da2a6f4127c
SHA256

ba9c8000ac307785c3e32297d772a53e0ccf6fab0e2a40930a465bce160e9d63
SHA512

e9165d4432a1b6ad7a4337a814f06b5fa9df8cada738089ecc14bb1a27cf040f8ad13c63f7301582fdec6fd0ba032e9a62fc91f1a61f0b2efc2c28cb2acda8b1
SSDEEP

12288:SX8/Vx65HCnDAByqulR1fZJQGs/Z87Rq:5/Vc5HCnDABMfZJQNZC

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
648	P3.exe

C:\Users\Admin\AppData\Local\Temp\P3.exe
"C:\Users\Admin\AppData\Local\Temp\P3.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:648

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\ProgramData\oxdligf\logs.dat

Filesize
144B

MD5
010dc00feb8731cb7f31e1413fde97b1

SHA1
7343e26301a86b27e8eb46ab293c5ff1cc07d6cb

SHA256
0657170edb9f5833abb02998dcaa511d5aeaad8346e858e15b6e2aa85c2568e9

SHA512
9d2b31acf2633affe149e9a9e6df99fa35a5ea6dce5c9c3144839868f19497992a9bb1c91df848bea5b6cdc5fa7debf5bed978cbbd493a8f2f5614d52ff1b0ea

Download Submit