c176dae94f60e6aa1e4be1f57742f2817e48ad29e4ba5b1119bd9131a0598408 | Triage

Analysis

max time kernel
141s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
13-06-2023 18:27

Sharing

Report Analysis Logs

General

Target

PEMIS.exe
Size

27.9MB
MD5

bf5a51dc55fd769441533ad976b0f6ac
SHA1

21a0d07ef1e890b09a59eb391b03506c183f9286
SHA256

c176dae94f60e6aa1e4be1f57742f2817e48ad29e4ba5b1119bd9131a0598408
SHA512

204dc494fe09b521798447eba90fd4adda1bb150dc362c8e2e9ea698c86816ed1910c44453440024606c461c6cc7fd4a02e6fba9845b8ca949dadc44fa163ad5
SSDEEP

786432:4oigo6W7kWeS+Zmsusi7ciOM4stmE0UhhiHNorCSxtUVVGTqN:zigodkWoEsuseOalhhiCrCSxkV9N

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 6 IoCs

Processes:

PEMIS.exe

pid process

1536 PEMIS.exe
1536 PEMIS.exe
1536 PEMIS.exe
1536 PEMIS.exe
1536 PEMIS.exe
1536 PEMIS.exe

C:\Users\Admin\AppData\Local\Temp\PEMIS.exe
"C:\Users\Admin\AppData\Local\Temp\PEMIS.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1536

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1536-133-0x0000000009410000-0x0000000009411000-memory.dmp

Filesize
4KB

Download
memory/1536-134-0x0000000000400000-0x0000000001400000-memory.dmp

Filesize
16.0MB

Download
memory/1536-135-0x0000000009410000-0x0000000009411000-memory.dmp

Filesize
4KB

Download