2cdf28e9a6011f008cdc87722b99e0ad40a88b97612f02d3e5781f0b98dcc59c | Triage

Analysis

max time kernel
141s
max time network
128s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
19-07-2023 08:09

Sharing

Report Analysis Logs

General

Target

Ship2005Group20170706.exe
Size

6.8MB
MD5

99325351c89b8ed667acd025069c94ff
SHA1

b0972198b59076b7da18b00fbe323b1a39f17595
SHA256

2cdf28e9a6011f008cdc87722b99e0ad40a88b97612f02d3e5781f0b98dcc59c
SHA512

4a9a6b47814bbf94d0dad7208d37bdaa698f5dacfe6cc0f09462336a522e2559e89e27ccc44bf9865283bf9c968d2216a7890670ea4c231384f8ba605dbbdeaa
SSDEEP

196608:sNDh9xLh4W2+dfyoQCrxmnTKQaVStLmi8WPm:GTNH2+hyoLmnTKiyX

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4724	Ship2005Group20170706.exe
4724	Ship2005Group20170706.exe

C:\Users\Admin\AppData\Local\Temp\Ship2005Group20170706.exe
"C:\Users\Admin\AppData\Local\Temp\Ship2005Group20170706.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4724

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4724-133-0x0000000004680000-0x0000000004681000-memory.dmp

Filesize
4KB

Download
memory/4724-134-0x0000000000400000-0x00000000028CF000-memory.dmp

Filesize
36.8MB

Download