6d129e5240f3ba5fea37b258623fe7d8ac02f166d3929830bc33fd8c3afe39b7 | Triage

Analysis

max time kernel
6s
max time network
122s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25-12-2023 12:58

Sharing

Report Analysis Logs

General

Target

204d635fb6c53685eef6558a35890689.exe
Size

28KB
MD5

204d635fb6c53685eef6558a35890689
SHA1

4d4f6f36cd72e483a7ff35778b22499e33ba2b40
SHA256

6d129e5240f3ba5fea37b258623fe7d8ac02f166d3929830bc33fd8c3afe39b7
SHA512

bc7de11f7b24b669718b99b7b43d3ee3bc85df2f00646da868ae61e6a330d30ff5a0689eb62c7bcad7766744bbdb518bbb56e8aa131833934d5c4174b6acece3
SSDEEP

384:izDg2hYdBP2pzt9QldiZwBNtwqE/HaIZ3v3LZJ5KFdXuJGu:Ys9BP2o4wB738Had

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2928	204d635fb6c53685eef6558a35890689.exe
2928	204d635fb6c53685eef6558a35890689.exe

C:\Users\Admin\AppData\Local\Temp\204d635fb6c53685eef6558a35890689.exe
"C:\Users\Admin\AppData\Local\Temp\204d635fb6c53685eef6558a35890689.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2928

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k ClipboardSvcGroup -p -s cbdhsvc
1⤵
PID:320

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads