5977442321a693717950365446880058cc2585485ea582daa515719c1c21c5bd | Triage

Analysis

max time kernel
120s
max time network
135s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
12/10/2023, 10:29

Sharing

Report Analysis Logs

General

Target

GetSymbol.exe
Size

15.2MB
MD5

d2a00fdf8244d6232dfe32ba46753088
SHA1

43eabf377ef8441669be814ab4d8c78f38213237
SHA256

5977442321a693717950365446880058cc2585485ea582daa515719c1c21c5bd
SHA512

08eaf7045fdfb43aba5bb04d9790dfc556d0a9a8ec32a655ce0d755a0abecb096a11e995d5a62f54cede6319748ddf10af47728bc39b37c8e0ca421e68727087
SSDEEP

196608:J3J30WFK4ZdtZpjyxicqou8ZFaMw6oTEPhFLOyomFHKnP:JZkW/tixicqou8naT6rPhF

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1444	GetSymbol.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1444	GetSymbol.exe
1444	GetSymbol.exe

C:\Users\Admin\AppData\Local\Temp\GetSymbol.exe
"C:\Users\Admin\AppData\Local\Temp\GetSymbol.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1444

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads