e0c0db566faa9ca565707bbd233dcf507118620f346e1e844f239f970024fe53 | Triage

Analysis

max time kernel
148s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25/12/2023, 17:37

Sharing

Report Analysis Logs

General

Target

3172b0a7b3289872df586a9b82086df1.exe
Size

60KB
MD5

3172b0a7b3289872df586a9b82086df1
SHA1

759361255a67452cc4165f3923b86977249e28a3
SHA256

e0c0db566faa9ca565707bbd233dcf507118620f346e1e844f239f970024fe53
SHA512

6b0ed1e08a5aa5a43c4db4e8692b52b8bae517d3a6f7d170c150449a622f4c821770ad1c1180a321ec1d1c8907e8dd69599f603ac2c8da002ab16cadf3f751b8
SSDEEP

768:lMs8W62c///EeeuGQ9qzU5jdK/IwM0HolF9Ms:M12cvESGQwzU54IwxHolF

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2064	3172b0a7b3289872df586a9b82086df1.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2064	3172b0a7b3289872df586a9b82086df1.exe
2064	3172b0a7b3289872df586a9b82086df1.exe
2064	3172b0a7b3289872df586a9b82086df1.exe

C:\Users\Admin\AppData\Local\Temp\3172b0a7b3289872df586a9b82086df1.exe
"C:\Users\Admin\AppData\Local\Temp\3172b0a7b3289872df586a9b82086df1.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2064

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads