6e33c713b1afcc73d4d26db6207f321535efdd4bd6cbe84f7661c58dcc9c230e | Triage

Analysis

max time kernel
127s
max time network
135s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
18-08-2023 22:02

Sharing

Report Analysis Logs

General

Target

1229.exe
Size

5.7MB
MD5

bbb2f3d09362827d6979101d6974f0a6
SHA1

b2d08f253a00fcc6b6df141949a61b715963570f
SHA256

6e33c713b1afcc73d4d26db6207f321535efdd4bd6cbe84f7661c58dcc9c230e
SHA512

01f818e9ab4a9b4db104d033016d4c582b93d9e3d6b0182921602f95dd0531a1e2ee449149665979501f8150f72486a07712793ea05aef1304604e594658ade7
SSDEEP

98304:qwUE54z/bVKVXhGVmoyz822cU3ZxJ9SrxMY8gxAnio:LDqrcU3ZklMJgxAB

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3868	1229.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3868	1229.exe
3868	1229.exe

C:\Users\Admin\AppData\Local\Temp\1229.exe
"C:\Users\Admin\AppData\Local\Temp\1229.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3868

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads