Analysis

  • max time kernel
    146s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26-12-2023 02:56

General

  • Target

    4e420d6fbc884d82be1f86e8c5a56d54.exe

  • Size

    1.4MB

  • MD5

    4e420d6fbc884d82be1f86e8c5a56d54

  • SHA1

    45ef3b7df8b71b38086fbf30029a37d831b2f781

  • SHA256

    e0ac59da755d3b69e61ae9c70f28a4ec88126cf2b1f0a49c3d19cc5e4ef1fe4f

  • SHA512

    cb34f616c301487b322eb96d02d9bcdaf6db617f4f585ddd577eabec8188fe66134f1281093bcd5dfc6699ab6e340d73117ed175d3913a492abd9b33ca4ad6b2

  • SSDEEP

    24576:8JI5gI11Tivj4SPX+e4tuBNSYWOgbLxJUOO3GhMAj+nQXWgVz+TyIm5Zx:F42ivSLJUO1h7oyImj

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4e420d6fbc884d82be1f86e8c5a56d54.exe
    "C:\Users\Admin\AppData\Local\Temp\4e420d6fbc884d82be1f86e8c5a56d54.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    PID:1900

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1900-0-0x00000000001B0000-0x00000000001B1000-memory.dmp

    Filesize

    4KB

  • memory/1900-1-0x0000000000400000-0x000000000057B000-memory.dmp

    Filesize

    1.5MB

  • memory/1900-3-0x00000000001B0000-0x00000000001B1000-memory.dmp

    Filesize

    4KB

  • memory/1900-7-0x0000000000400000-0x000000000057B000-memory.dmp

    Filesize

    1.5MB