65f93f0ed551a99a66dc02448f29958353de8292b54ac3def8f7821eef503974 | Triage

Analysis

max time kernel
159s
max time network
189s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25/12/2023, 14:08

Sharing

Report Analysis Logs

General

Target

phone-a.exe
Size

1.0MB
MD5

e1d770eb6887b844604b190e871f316a
SHA1

8f3b4477a81d18b15f02b4f72a4742e28ec0fa0e
SHA256

3e22fb85bac192be3c12a188041f1f4d0b23e11df33fbcc7268397a7e6039fa8
SHA512

4ffa39e501e260112605439c24a9ec7c46f05faf28eb2b9623086b32d23304171ca9df7c2a14d5eea29f3369386dc55a868f57d482655a560fdeb3562d56a129
SSDEEP

12288:8DdsAVdO/qAhVAAORLuk2siXEHQApAb1qyVr3gnGvce+fgbmc6f0uT:KJY/hVADz8M01yVJdf

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2240	phone-a.exe
2240	phone-a.exe

C:\Users\Admin\AppData\Local\Temp\phone-a.exe
"C:\Users\Admin\AppData\Local\Temp\phone-a.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2240

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2240-0-0x00000000022A0000-0x00000000022A1000-memory.dmp

Filesize
4KB

Download
memory/2240-2-0x0000000000400000-0x0000000000507000-memory.dmp

Filesize
1.0MB

Download
memory/2240-4-0x00000000022A0000-0x00000000022A1000-memory.dmp

Filesize
4KB

Download