ac345cb597e9e4f096758aadb2348723a94097ede015a08643e3c76665e8d627 | Triage

Analysis

max time kernel
135s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
17/05/2023, 19:07

Sharing

Report Analysis Logs

General

Target

wordpad.exe
Size

2.9MB
MD5

91f992550eaf33609b8c27c680402eba
SHA1

c918680174f05d7ca59a9e4767aa46ea8a778c96
SHA256

ac345cb597e9e4f096758aadb2348723a94097ede015a08643e3c76665e8d627
SHA512

59485f0a74afc71b315bfca535556ee0ec4d602bd77072647e62a475584e49aa9cdd64e6cc4d9d5f678d0ed089e4a08dfb0a7ae5137a7e8b18b475559fd594da
SSDEEP

24576:Lvkwi/7Vv0SMwmdLUVPxnHfaJPf2FxvNEYr8oSUGeP9PDkjjqXB:LW74LU5xn/aJwxvWCXSZeP9PDk3W

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2348	wordpad.exe
2348	wordpad.exe

C:\Users\Admin\AppData\Local\Temp\wordpad.exe
"C:\Users\Admin\AppData\Local\Temp\wordpad.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2348

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads