2cdf28e9a6011f008cdc87722b99e0ad40a88b97612f02d3e5781f0b98dcc59c | Triage

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
19/07/2023, 08:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

Ship2005Group20170706.exe
Size

6.8MB
MD5

99325351c89b8ed667acd025069c94ff
SHA1

b0972198b59076b7da18b00fbe323b1a39f17595
SHA256

2cdf28e9a6011f008cdc87722b99e0ad40a88b97612f02d3e5781f0b98dcc59c
SHA512

4a9a6b47814bbf94d0dad7208d37bdaa698f5dacfe6cc0f09462336a522e2559e89e27ccc44bf9865283bf9c968d2216a7890670ea4c231384f8ba605dbbdeaa
SSDEEP

196608:sNDh9xLh4W2+dfyoQCrxmnTKQaVStLmi8WPm:GTNH2+hyoLmnTKiyX

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2908	Ship2005Group20170706.exe
2908	Ship2005Group20170706.exe

C:\Users\Admin\AppData\Local\Temp\Ship2005Group20170706.exe
"C:\Users\Admin\AppData\Local\Temp\Ship2005Group20170706.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2908

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2908-54-0x0000000000230000-0x0000000000231000-memory.dmp

Filesize
4KB

Download
memory/2908-55-0x0000000000400000-0x00000000028CF000-memory.dmp

Filesize
36.8MB

Download