e462cf54512376060fe1f01801e686b39c048576cf6ff7e884e80da1e80d83c9 | Triage

Analysis

max time kernel
166s
max time network
140s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
24/12/2023, 15:30

Sharing

Report Analysis Logs

General

Target

03acbe3330fe59a1507eb2b8cc975a3e.exe
Size

48KB
MD5

03acbe3330fe59a1507eb2b8cc975a3e
SHA1

0a0c4de1275b957d4e2b7ae453aa7ca627fc1ed6
SHA256

e462cf54512376060fe1f01801e686b39c048576cf6ff7e884e80da1e80d83c9
SHA512

6e5508aae60028a1b19f9ca4ffd1bc9594a5ed6a3665361c87e7788b8c658caaf4e6631140b809eb178100ac44f42c878c178111fcce8e35be9567254e092e9e
SSDEEP

768:kTzGCOiCqexYgm66Fhzx/AW9V/+SjNXhk/66Bk+BBoF:SSiCbtrA5xYgW+k/61MB

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2096	03acbe3330fe59a1507eb2b8cc975a3e.exe
2096	03acbe3330fe59a1507eb2b8cc975a3e.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2096	03acbe3330fe59a1507eb2b8cc975a3e.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2096	03acbe3330fe59a1507eb2b8cc975a3e.exe
2096	03acbe3330fe59a1507eb2b8cc975a3e.exe

C:\Users\Admin\AppData\Local\Temp\03acbe3330fe59a1507eb2b8cc975a3e.exe
"C:\Users\Admin\AppData\Local\Temp\03acbe3330fe59a1507eb2b8cc975a3e.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
PID:2096

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2096-0-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download