548fd6a6cfd536430d5020c57b5679b7f67a24764db93ff2f2769b894372bd7d | Triage

Analysis

max time kernel
150s
max time network
30s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
14-06-2023 18:31

Sharing

Report Analysis Logs

General

Target

VPN.exe
Size

1.5MB
MD5

93c96b95e330878011cbbe5e37834c7b
SHA1

6d4d7bb0766e08760d53971a0cea6cee999dcdef
SHA256

548fd6a6cfd536430d5020c57b5679b7f67a24764db93ff2f2769b894372bd7d
SHA512

89a4f52163aa8ddb17a063c5bd4cf4cf795d02477c9ebf6d45864a4589c808b52a02ef322c7961675a4b2f300fa7f0b6d5c32e94d730a8daed1e85864bbecf07
SSDEEP

49152:kIbYQSEkxj4Lzr6q9jDfCvNu2LQHjIeV1TMAYFf1zLj4tvLb2R:kIXSEQ4LzOqFfoNu2LQHjHVPYFfdLj4k

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
928	VPN.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
928	VPN.exe
928	VPN.exe

C:\Users\Admin\AppData\Local\Temp\VPN.exe
"C:\Users\Admin\AppData\Local\Temp\VPN.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:928

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads