dd1398e732ef07a54ebe588abe40fc0069c9cd95e723d99ecfe725c43a9d1e51 | Triage

Analysis

max time kernel
143s
max time network
171s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
30/12/2023, 04:21

Sharing

Report Analysis Logs

General

Target

0e480c9f49199f9f7b42a954d5d50a43.exe
Size

328KB
MD5

0e480c9f49199f9f7b42a954d5d50a43
SHA1

59d6c3bf4f65c9ad3ab66aeda540d0ded466cf08
SHA256

dd1398e732ef07a54ebe588abe40fc0069c9cd95e723d99ecfe725c43a9d1e51
SHA512

0f68d63801f95f7e9eeb919d003286baa5e6a346c2bdf8fe153ce9482557b3080983efc255c48f5ab76c1fe9559f560ef76c1494d781a02d06cabf2a25e91537
SSDEEP

6144:y9h7qduEIwqllG7sOC12C+g0PRToNvId32d9d:WwwXOnY0Z9N8

Score

4^/10

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\win.ini	0e480c9f49199f9f7b42a954d5d50a43.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3768	0e480c9f49199f9f7b42a954d5d50a43.exe

C:\Users\Admin\AppData\Local\Temp\0e480c9f49199f9f7b42a954d5d50a43.exe
"C:\Users\Admin\AppData\Local\Temp\0e480c9f49199f9f7b42a954d5d50a43.exe"
1⤵
- Drops file in Windows directory
- Suspicious use of SetWindowsHookEx
PID:3768

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads