dba6414393440ec99b53bf048f9723da69295883f64a21fc390efba071cfb583 | Triage

Analysis

max time kernel
199s
max time network
205s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
26/12/2023, 04:28

Sharing

Report Analysis Logs

General

Target

5420e74d6d1cbaf1ba39086bca1d0c2f.exe
Size

712KB
MD5

5420e74d6d1cbaf1ba39086bca1d0c2f
SHA1

4767ab4f025c48ccf86b37e062f075d348b793b7
SHA256

dba6414393440ec99b53bf048f9723da69295883f64a21fc390efba071cfb583
SHA512

52f4903488393d4e69a678027fe2fecbb619565f569143e85d4b4b1f96f30e017233702da9fcb01278110103d86608fd398c81e952d93e456233a10a424bdcc0
SSDEEP

12288:60Pb0fghr9hpXNjZCKxbavAGeWZab/PodJ:60PbEspNjAKJa4Gqb3w

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3592	5420e74d6d1cbaf1ba39086bca1d0c2f.exe
3592	5420e74d6d1cbaf1ba39086bca1d0c2f.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3592	5420e74d6d1cbaf1ba39086bca1d0c2f.exe
3592	5420e74d6d1cbaf1ba39086bca1d0c2f.exe

C:\Users\Admin\AppData\Local\Temp\5420e74d6d1cbaf1ba39086bca1d0c2f.exe
"C:\Users\Admin\AppData\Local\Temp\5420e74d6d1cbaf1ba39086bca1d0c2f.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:3592

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads