81d4dd4ab69d60db8bccbcbb2c80dd131661a50de73c3896a47c3ab1d945276d | Triage

Analysis

max time kernel
142s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
30/12/2023, 02:33

Sharing

Report Analysis Logs

General

Target

0bcdf93298e9c38ba09cbd427da1f418.exe
Size

65KB
MD5

0bcdf93298e9c38ba09cbd427da1f418
SHA1

9375ba6cf5083c1feeb606c93acc9bf4577532c6
SHA256

81d4dd4ab69d60db8bccbcbb2c80dd131661a50de73c3896a47c3ab1d945276d
SHA512

3226a4f993a47f9601d68dd79cfd28771499aa19d738525fa925be3b394778ae744fa6c6790aa7b19be17a032e403d8affc37ba56390bf3bb48f8bb73b89fb6a
SSDEEP

1536:lygVG1e7NYHkR0XRuWLfgnBYRKYdFYFlF9hFvXj:XVMIUkGXVUnBqKYdy/F9htj

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
4008	0bcdf93298e9c38ba09cbd427da1f418.exe
4008	0bcdf93298e9c38ba09cbd427da1f418.exe
4008	0bcdf93298e9c38ba09cbd427da1f418.exe

C:\Users\Admin\AppData\Local\Temp\0bcdf93298e9c38ba09cbd427da1f418.exe
"C:\Users\Admin\AppData\Local\Temp\0bcdf93298e9c38ba09cbd427da1f418.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4008

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4008-0-0x0000000000400000-0x000000000042D000-memory.dmp

Filesize
180KB

Download
memory/4008-3-0x0000000000400000-0x000000000042D000-memory.dmp

Filesize
180KB

Download
memory/4008-5-0x0000000000400000-0x000000000042D000-memory.dmp

Filesize
180KB

Download