0b480f1889437922e77d39ba8618191a29e9abe47c9f97a59668140949589695 | Triage

Analysis

max time kernel
120s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26/12/2023, 05:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

5796f8f6b304aff2d9b1874ecaef84af.exe
Size

214KB
MD5

5796f8f6b304aff2d9b1874ecaef84af
SHA1

4937302fd590f8e481a4e278ff728390f60020a8
SHA256

0b480f1889437922e77d39ba8618191a29e9abe47c9f97a59668140949589695
SHA512

e91940e83d0ba8e72d598fef15e578521cd10578be6bdf65e66a681876edd9eff50aff609a62510b8a8b522a4d5fa887cdd51be36c728c031807346645f57dee
SSDEEP

6144:tD9oH24fPY44hR65dPJUirZEIZGejPvQLlK:tDw24fPyh4dPOiZGeClK

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3020	5796f8f6b304aff2d9b1874ecaef84af.exe

C:\Users\Admin\AppData\Local\Temp\5796f8f6b304aff2d9b1874ecaef84af.exe
"C:\Users\Admin\AppData\Local\Temp\5796f8f6b304aff2d9b1874ecaef84af.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3020

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3020-0-0x0000000000240000-0x0000000000254000-memory.dmp

Filesize
80KB

Download
memory/3020-1-0x0000000000400000-0x0000000000439000-memory.dmp

Filesize
228KB

Download
memory/3020-2-0x0000000000400000-0x0000000000439000-memory.dmp

Filesize
228KB

Download