06b9b10a15c0b2856620dd4469c8a976bfbc42e506747a04a763dbeeaf1ecb79 | Triage

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20231201-en
resource tags

arch:x64arch:x86image:win7-20231201-enlocale:en-usos:windows7-x64system
submitted
06-12-2023 16:41

Sharing

Report Analysis Logs

General

Target

clientfmUx.exe
Size

516KB
MD5

38a9b7e6b93904b572e76cad2f99353c
SHA1

20bd0ea13cbc76cdbb9d002a457e543d02e9d500
SHA256

06b9b10a15c0b2856620dd4469c8a976bfbc42e506747a04a763dbeeaf1ecb79
SHA512

b381687ef7f9f32af5b254b33bfffc287f675ba06d990df011a460c4f76c81d76546203af6bf0fc412e328d5e013e3997db56b3454002edc71ab6357e4211683
SSDEEP

12288:1oPHzIcgTRo9RvHBQAC76LUkd0bpaMwdHqUz:SPHM1ohP0XAx

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes:

clientfmUx.exe

pid process

2076 clientfmUx.exe
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

clientfmUx.exe

pid process

2076 clientfmUx.exe

C:\Users\Admin\AppData\Local\Temp\clientfmUx.exe
"C:\Users\Admin\AppData\Local\Temp\clientfmUx.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:2076

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2076-0-0x0000000000400000-0x0000000000488000-memory.dmp

Filesize
544KB

Download