21620918dc196e04631bc88e761fd7ff17add76156f3c57ca0bd2a55bd77f554 | Triage

Resubmissions

03/08/2023, 21:39

230803-1h4rzahd8s 3

03/08/2023, 20:45

230803-zjtgyshc5t 3

Analysis

max time kernel
118s
max time network
121s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
03/08/2023, 21:39

Sharing

Report Analysis Logs

General

Target

KG669.exe
Size

180KB
MD5

4984fd311929cb3eaf7e4b13a91aeb42
SHA1

9cc520fef6e3cb9c0752eefe13bd066e809e8f65
SHA256

21620918dc196e04631bc88e761fd7ff17add76156f3c57ca0bd2a55bd77f554
SHA512

73f878f2931b7731d449a2d6b9ff18eb1c19af7c43ad2ff975ec609421271c314d917c1dd4c39c09fad4755083efc0e09dd6d84b24c27f001c4ba81b02dd0d22
SSDEEP

3072:Eq4DWb339F8MdXsBGVIpw/nHMWL7Rez4YNTM:EWF8MCDpqHMm9eUYNT

Score

1^/10

Malware Config

Signatures

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2432	KG669.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2432	KG669.exe
2432	KG669.exe

C:\Users\Admin\AppData\Local\Temp\KG669.exe
"C:\Users\Admin\AppData\Local\Temp\KG669.exe"
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
PID:2432

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads