18408ab00fb2d0aecc9a6f65e1fe9510627e59274d954b135f69da34ac56579a | Triage

Analysis

max time kernel
137s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20231023-en
resource tags

arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
submitted
12-11-2023 23:06

Sharing

Report Analysis Logs

General

Target

tmp.exe
Size

1.0MB
MD5

d70197852e8577d4cb1f0dc8695a4337
SHA1

93d3d0801a219e08277d02276edd9cc7fcfe1cbc
SHA256

18408ab00fb2d0aecc9a6f65e1fe9510627e59274d954b135f69da34ac56579a
SHA512

347bb17029265566400e2225ec1f6a51f3e823b40a994dcdb5ab10e58d4da2d91f4f4bf11c12cfb1100b36425092f17d1937dfeb73cc68a7e7612972bf2aae6c
SSDEEP

24576:iM02vFb1W0ZJdlevZPamfhE/Um7D1fUggepjfJ+gaELmeZS:iM02vFb1TJAUmfhtIaEJo

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3604	tmp.exe
3604	tmp.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
3604	tmp.exe
3604	tmp.exe
3604	tmp.exe

C:\Users\Admin\AppData\Local\Temp\tmp.exe
"C:\Users\Admin\AppData\Local\Temp\tmp.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:3604

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads