7ffcd54be44596fb4d036b27613c7d503dc886cb4fea07de2b7182f3a042a6fd | Triage

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
30/12/2023, 03:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

0cdfec677834e7343abea3a28594eb5b.exe
Size

35KB
MD5

0cdfec677834e7343abea3a28594eb5b
SHA1

1fa393c77160f1d882cd7607af190a0ff0acfaf9
SHA256

7ffcd54be44596fb4d036b27613c7d503dc886cb4fea07de2b7182f3a042a6fd
SHA512

2512d5ff0ca6e7ccb6335e116b0949ac831ccd5260b6c157850c93ddbe0d9344c1279954dacd04db583b45a364b3c21888def0f9f44bfd8add1cf65e88786d5c
SSDEEP

768:hpTHmJ3p+ljv78zFGMLpPcrVaTnDP+vSeFJd4Ia:hMAjv78zIMd8VsmFJd4P

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1716	0cdfec677834e7343abea3a28594eb5b.exe

Suspicious use of WriteProcessMemory 5 IoCs

description	pid	Process	procid_target
PID 1716 wrote to memory of 2156	1716	0cdfec677834e7343abea3a28594eb5b.exe	15
PID 1716 wrote to memory of 2156	1716	0cdfec677834e7343abea3a28594eb5b.exe	15
PID 1716 wrote to memory of 2156	1716	0cdfec677834e7343abea3a28594eb5b.exe	15
PID 1716 wrote to memory of 2156	1716	0cdfec677834e7343abea3a28594eb5b.exe	15
PID 1716 wrote to memory of 2156	1716	0cdfec677834e7343abea3a28594eb5b.exe	15

C:\Users\Admin\AppData\Local\Temp\0cdfec677834e7343abea3a28594eb5b.exe
"C:\Users\Admin\AppData\Local\Temp\0cdfec677834e7343abea3a28594eb5b.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1716
- C:\Users\Admin\AppData\Local\Temp\0cdfec677834e7343abea3a28594eb5b.exe
  C:\Users\Admin\AppData\Local\Temp\0cdfec677834e7343abea3a28594eb5b.exe
  2⤵
  PID:2156

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1716-0-0x0000000000400000-0x00000000004068D4-memory.dmp

Filesize
26KB

Download
memory/1716-3-0x0000000000400000-0x00000000004068D4-memory.dmp

Filesize
26KB

Download