cb04f733c0a33674b5212a9d0a3ba2c893b00ca3775ea2b0e25f54a72a42a8d0 | Triage

Analysis

max time kernel
1791s
max time network
1793s
platform
windows11-21h2_x64
resource
win11-20231129-en
resource tags

arch:x64arch:x86image:win11-20231129-enlocale:en-usos:windows11-21h2-x64system
submitted
02-12-2023 02:21

Sharing

Report Analysis Logs

General

Target

chdyz.exe
Size

1.0MB
MD5

d70197852e8577d4cb1f0dc8695a4337
SHA1

93d3d0801a219e08277d02276edd9cc7fcfe1cbc
SHA256

18408ab00fb2d0aecc9a6f65e1fe9510627e59274d954b135f69da34ac56579a
SHA512

347bb17029265566400e2225ec1f6a51f3e823b40a994dcdb5ab10e58d4da2d91f4f4bf11c12cfb1100b36425092f17d1937dfeb73cc68a7e7612972bf2aae6c
SSDEEP

24576:iM02vFb1W0ZJdlevZPamfhE/Um7D1fUggepjfJ+gaELmeZS:iM02vFb1TJAUmfhtIaEJo

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 4 IoCs

Processes:

chdyz.exe

pid process

484 chdyz.exe
484 chdyz.exe
484 chdyz.exe
484 chdyz.exe
Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

chdyz.exe

pid process

484 chdyz.exe
Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

chdyz.exe

pid process

484 chdyz.exe
484 chdyz.exe
484 chdyz.exe

C:\Users\Admin\AppData\Local\Temp\chdyz.exe
"C:\Users\Admin\AppData\Local\Temp\chdyz.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:484

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads