9518c8e9a5570d7274b14ea28913f1666249e1802107e753da294864ba94f470 | Triage

Analysis

max time kernel
151s
max time network
160s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25-12-2023 07:57

Sharing

Report Analysis Logs

General

Target

123.exe
Size

237KB
MD5

281c6475303e4a9d0726c442abe80a8c
SHA1

91dfa429d0212d0aa1d375e7b5ae8b223e08b81e
SHA256

c09f4fa19b146d8661e18cdb92a2d9c6ab41667b82669a5d49dc83b34d75d914
SHA512

b0e3bcc8d7fab0b006f8939dcd6805ea38002657859d333ced1a4a7b967caf53f7097cd3e71a7cec12a33d0a44787644867594733797f39a7894b5547df28e43
SSDEEP

6144:CxYLN7m3JN3362xI8jdy4RJyxQ3+mszBsPSl0dZ3:CxYA/3q8PjdyGJzrZ3

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4080	123.exe
4080	123.exe

Suspicious behavior: LoadsDriver 2 IoCs

pid	Process
660	Process not Found
660	Process not Found

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4080	123.exe
4080	123.exe

C:\Users\Admin\AppData\Local\Temp\123.exe
"C:\Users\Admin\AppData\Local\Temp\123.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4080

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads