e61cf109b08bb988d4df31dc07ba7a961cb079b427138eb89692d85a90d57025 | Triage

Analysis

max time kernel
88s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
24/12/2023, 22:26

Sharing

Report Analysis Logs

General

Target

15a1fb331f61ac3fd07682064a256603.exe
Size

20KB
MD5

15a1fb331f61ac3fd07682064a256603
SHA1

256881e7553a16a627faf9e4acd8a5b907c24d0c
SHA256

e61cf109b08bb988d4df31dc07ba7a961cb079b427138eb89692d85a90d57025
SHA512

a3a39ae34207dd11854e88ec2b0f3bf333ac61877a70d110cd5239421b5ea98da933102d266d3fc9b3e0146f47fe9be687c78226c14687f0dea6d37e489fdb3f
SSDEEP

384:lCcbhFYis5gXYztkp9yyRyr9BT1B3SzF:vbDAiXYzvyRwBZZSz

Score

1^/10

Malware Config

Signatures

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{AF604EFE-8897-11D1-B944-00A0C90312E1}\InProcServer32\	15a1fb331f61ac3fd07682064a256603.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
5012	15a1fb331f61ac3fd07682064a256603.exe

C:\Users\Admin\AppData\Local\Temp\15a1fb331f61ac3fd07682064a256603.exe
"C:\Users\Admin\AppData\Local\Temp\15a1fb331f61ac3fd07682064a256603.exe"
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:5012

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads