Analysis

  • max time kernel
    140s
  • max time network
    103s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230221-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30-05-2023 05:48

General

  • Target

    bac8d8a1a1eefa611ffa6c9f3a6da18345b8110e6ee25517f1d459f81c81366f.exe

  • Size

    2.7MB

  • MD5

    23a148f40f680ec83bc42ee635fd1272

  • SHA1

    734d31807eec8bba447aee6531ff488da4960882

  • SHA256

    bac8d8a1a1eefa611ffa6c9f3a6da18345b8110e6ee25517f1d459f81c81366f

  • SHA512

    747f22d1aaf79a17e944f6df86dde3aead0e3bd5a0d32f2912d86854152b52abd2750373821ab96d5fbe34c034ed0a30692710a041312a5a2db3ab53dce8b68d

  • SSDEEP

    49152:p1Jcsi2WuJB83kuYfQ3BgscPOq75nyD9qOAWouw2r2VUAyYe:Fcsi2fH/pQgscPO+5yJqObbr2VUF

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\bac8d8a1a1eefa611ffa6c9f3a6da18345b8110e6ee25517f1d459f81c81366f.exe
    "C:\Users\Admin\AppData\Local\Temp\bac8d8a1a1eefa611ffa6c9f3a6da18345b8110e6ee25517f1d459f81c81366f.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1216

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1216-133-0x0000000000400000-0x0000000001427000-memory.dmp
    Filesize

    16.2MB

  • memory/1216-135-0x0000000000400000-0x0000000001427000-memory.dmp
    Filesize

    16.2MB

  • memory/1216-134-0x0000000000400000-0x0000000001427000-memory.dmp
    Filesize

    16.2MB

  • memory/1216-136-0x0000000000400000-0x0000000001427000-memory.dmp
    Filesize

    16.2MB

  • memory/1216-137-0x0000000000400000-0x0000000001427000-memory.dmp
    Filesize

    16.2MB

  • memory/1216-138-0x0000000001700000-0x0000000001701000-memory.dmp
    Filesize

    4KB

  • memory/1216-139-0x0000000000400000-0x0000000001427000-memory.dmp
    Filesize

    16.2MB

  • memory/1216-141-0x0000000000400000-0x0000000001427000-memory.dmp
    Filesize

    16.2MB

  • memory/1216-142-0x0000000001700000-0x0000000001701000-memory.dmp
    Filesize

    4KB