Analysis

  • max time kernel
    123s
  • max time network
    131s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/09/2023, 14:49

General

  • Target

    20818286db214394b2a4ca950d9e8aa8f17ef5c06a2f9832640ae543dec8fbe6.exe

  • Size

    4.4MB

  • MD5

    b99167e6e7dcea46329f6794397fcd2f

  • SHA1

    953dde5db3564d02862071242f3da1ef499d9fef

  • SHA256

    20818286db214394b2a4ca950d9e8aa8f17ef5c06a2f9832640ae543dec8fbe6

  • SHA512

    86856758aca9e73ded489a386a190eb5d4bd7627fbc07282a3c3cbb01056ab089f049749adcf98c0a2ee65f14284289fe16e5dc2fe8f8a77d4dcb51654bdb2cf

  • SSDEEP

    49152:ApUtXjv+5C0z/iPd/p1J4C2UHQbbsqUTrkwLqqEdeHRwt64+yH/iEM7lc3BU0nw:MUt7gC0z/sd7J4C2UHQbb4+qxI/i

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\20818286db214394b2a4ca950d9e8aa8f17ef5c06a2f9832640ae543dec8fbe6.exe
    "C:\Users\Admin\AppData\Local\Temp\20818286db214394b2a4ca950d9e8aa8f17ef5c06a2f9832640ae543dec8fbe6.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3412

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/3412-0-0x0000000002270000-0x000000000228A000-memory.dmp

          Filesize

          104KB

        • memory/3412-1-0x0000000075CC0000-0x0000000075DB0000-memory.dmp

          Filesize

          960KB

        • memory/3412-2-0x00000000024D0000-0x00000000025C0000-memory.dmp

          Filesize

          960KB

        • memory/3412-3-0x0000000075CC0000-0x0000000075DB0000-memory.dmp

          Filesize

          960KB

        • memory/3412-4-0x0000000002270000-0x000000000228A000-memory.dmp

          Filesize

          104KB

        • memory/3412-5-0x0000000075CC0000-0x0000000075DB0000-memory.dmp

          Filesize

          960KB

        • memory/3412-6-0x0000000075CC0000-0x0000000075DB0000-memory.dmp

          Filesize

          960KB