b04946cd7dfe44ca939089257afda78236d05b323fa6cc3d6abc13f4d87354bd | Triage

Analysis

max time kernel
153s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25/12/2023, 00:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

1b5631d59ec9700c55c3ab52fdf70cea.exe
Size

1.3MB
MD5

1b5631d59ec9700c55c3ab52fdf70cea
SHA1

4ef7707bd866bbfc11f2b6167e908660c9033eb7
SHA256

b04946cd7dfe44ca939089257afda78236d05b323fa6cc3d6abc13f4d87354bd
SHA512

8f91b699fa38c6cf77bf80d8e6a069f98728b45f68fc0b413a4f5b3e20b8030620136d9bdf1264468417345a8d444884570b7b566a8fb3fa12978b9e9d1fb258
SSDEEP

24576:Kk2TZRAcEP66T+6wPhtUs6VMh1SbrkvaZs:32lGP6P6Uis4Mh1Uq

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
568	1b5631d59ec9700c55c3ab52fdf70cea.exe
568	1b5631d59ec9700c55c3ab52fdf70cea.exe

C:\Users\Admin\AppData\Local\Temp\1b5631d59ec9700c55c3ab52fdf70cea.exe
"C:\Users\Admin\AppData\Local\Temp\1b5631d59ec9700c55c3ab52fdf70cea.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:568

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/568-0-0x0000000000B60000-0x0000000000B61000-memory.dmp

Filesize
4KB

Download
memory/568-2-0x0000000000400000-0x0000000000554000-memory.dmp

Filesize
1.3MB

Download
memory/568-23-0x0000000000B60000-0x0000000000B61000-memory.dmp

Filesize
4KB

Download