d029906a972b203a8dc3db0aaa84545dec8b408733380054eb526326617b2852 | Triage

Analysis

max time kernel
143s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
16-07-2023 01:28

Sharing

Report Analysis Logs

General

Target

tempy/putty.exe
Size

1.6MB
MD5

f838fdafd0881cf1e6040a07d78e840d
SHA1

2a35456b2f67bd12905378beb6eaf373f6a0d0d1
SHA256

fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c
SHA512

5c0389eb79e5c2638c0d770cde1a5c56a237aa596503966d4f226a99f94531af501f8bf4efa00722e12998f73271e50d8c187f8e984125affe40b1ab231503b4
SSDEEP

49152:TDXOPFJK9bbYF8paMB8QMy3bHwPXNg/7UyW+ekBeZmn:T0WhreNg/X

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1392	putty.exe

C:\Users\Admin\AppData\Local\Temp\tempy\putty.exe
"C:\Users\Admin\AppData\Local\Temp\tempy\putty.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:1392

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads