Analysis

  • max time kernel
    141s
  • max time network
    127s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30-05-2023 02:22

General

  • Target

    cdd2cc5f86ced443d3e5c4cd7308aefb251ffb1a390107ced534a9d47a3fee6d.exe

  • Size

    445KB

  • MD5

    a55c36fed03139d5eba18bffadf734e2

  • SHA1

    47f5e2286216524055c04c6981ed3fa176b52f7b

  • SHA256

    cdd2cc5f86ced443d3e5c4cd7308aefb251ffb1a390107ced534a9d47a3fee6d

  • SHA512

    eb1f342bf34d7b7894b888d0d4c74fc65b9c808c1c1dd3a0a8519d952332c093bde8e2bb6a488aeafccadedadf3a4aa5bea10a9ed8a530ec2ee55c246eee7991

  • SSDEEP

    12288:wAomCc/W+rA1bWbn6NtW4gOJtHKaKw+OOm0KQ1FvI:w4CirA1b+6/OOetw+cQLI

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\cdd2cc5f86ced443d3e5c4cd7308aefb251ffb1a390107ced534a9d47a3fee6d.exe
    "C:\Users\Admin\AppData\Local\Temp\cdd2cc5f86ced443d3e5c4cd7308aefb251ffb1a390107ced534a9d47a3fee6d.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1228

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1228-134-0x0000000000400000-0x000000000057A000-memory.dmp
    Filesize

    1.5MB

  • memory/1228-133-0x0000000000400000-0x000000000057A000-memory.dmp
    Filesize

    1.5MB

  • memory/1228-135-0x0000000000400000-0x000000000057A000-memory.dmp
    Filesize

    1.5MB

  • memory/1228-136-0x0000000000400000-0x000000000057A000-memory.dmp
    Filesize

    1.5MB

  • memory/1228-137-0x0000000000400000-0x000000000057A000-memory.dmp
    Filesize

    1.5MB

  • memory/1228-141-0x0000000000400000-0x000000000057A000-memory.dmp
    Filesize

    1.5MB

  • memory/1228-142-0x0000000000400000-0x000000000057A000-memory.dmp
    Filesize

    1.5MB

  • memory/1228-143-0x0000000000400000-0x000000000057A000-memory.dmp
    Filesize

    1.5MB

  • memory/1228-148-0x0000000000400000-0x000000000057A000-memory.dmp
    Filesize

    1.5MB

  • memory/1228-149-0x0000000000400000-0x000000000057A000-memory.dmp
    Filesize

    1.5MB