51e1160e95ce7fc7bb0aadf3d2df15f63f0eda6a4f4f9dcbcac2fa2c274c6ee4 | Triage

Analysis

max time kernel
142s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
03/08/2023, 17:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

tmp.exe
Size

4.8MB
MD5

a10fa64c05f5bb526dcba64d60064e84
SHA1

e6ce00e73374b8c78f503c2742815eba291a582f
SHA256

51e1160e95ce7fc7bb0aadf3d2df15f63f0eda6a4f4f9dcbcac2fa2c274c6ee4
SHA512

a918e3a217b6373cb5dae0228c032011bf319b62386a5b221ffdf2d36091ebe2259c19a7fd7a18bd8cc34a10542a9358e65aa90181fbbac2d8893372272656b5
SSDEEP

98304:GDHZC4mTh4lw9vzSywti+JGv2BZSPyJD6ZXKwi1jDQXO0qgaaDAAnyuDbo9:Ww9zSFbBZSPyF6VKrgpnywbO

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3448	tmp.exe
3448	tmp.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
3448	tmp.exe
3448	tmp.exe
3448	tmp.exe
3448	tmp.exe

C:\Users\Admin\AppData\Local\Temp\tmp.exe
"C:\Users\Admin\AppData\Local\Temp\tmp.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:3448

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads