4d3ea64473bd7d77afebd2ec1dd8dc56b5ddcb0d16680ba907ff0ba579ea155e | Triage

Analysis

max time kernel
142s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
15/10/2023, 19:39

Sharing

Report Analysis Logs

General

Target

70c9bd03301061d5b11f7a4f9389d2d0_exe32.exe
Size

148KB
MD5

70c9bd03301061d5b11f7a4f9389d2d0
SHA1

2a9ec3ab12af8e6f6c4db1e3894e1ddc2ce69ad4
SHA256

4d3ea64473bd7d77afebd2ec1dd8dc56b5ddcb0d16680ba907ff0ba579ea155e
SHA512

30b11263f7328a748192d9caf682b9d9caec9b8283cc5e69f1f75d6a1278007db2131ab89268dd512114d3fcd0021ae007483b1be49d55fd73716d2617469456
SSDEEP

3072:vu5PDykjCqw2hyNK7D6zd43+P+kdMTe+EO:vpk

Score

7^/10

Malware Config

Signatures

Drops startup file 2 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\WinUpdater.exe	70c9bd03301061d5b11f7a4f9389d2d0_exe32.exe
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\WinUpdater.exe	70c9bd03301061d5b11f7a4f9389d2d0_exe32.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3688	70c9bd03301061d5b11f7a4f9389d2d0_exe32.exe

C:\Users\Admin\AppData\Local\Temp\70c9bd03301061d5b11f7a4f9389d2d0_exe32.exe
"C:\Users\Admin\AppData\Local\Temp\70c9bd03301061d5b11f7a4f9389d2d0_exe32.exe"
1⤵
- Drops startup file
- Suspicious use of SetWindowsHookEx
PID:3688

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads