Analysis

  • max time kernel
    146s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30-12-2023 08:01

General

  • Target

    12de269666dc3ec58024a0f6c067d7c1.exe

  • Size

    625KB

  • MD5

    12de269666dc3ec58024a0f6c067d7c1

  • SHA1

    fba5d70afb39bcc29a4f899cf661568b6fbc4ba7

  • SHA256

    181cd157f7640e64998b698a417ee583a827e3764d6e557775350d910c881b96

  • SHA512

    67236435035c0276afda274628018e35ea78c3d5372c60290d1b78fe9192df584482bc7272ba8c8d00b70d289d30373d77680243c4e60473dd05a5dfef4f569c

  • SSDEEP

    12288:4mLvVLG8jKfvquZ7x7JYKbbavqA/U6GBmhEgE+u9WhhlMTLt00mtutpEE:4mLv1G8jKfvquZ7JJYK8qA/TGBmi+u99

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\12de269666dc3ec58024a0f6c067d7c1.exe
    "C:\Users\Admin\AppData\Local\Temp\12de269666dc3ec58024a0f6c067d7c1.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4876

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\offconfig.temp

    Filesize

    41KB

    MD5

    788ba8d7fe965367ba92008b1719bdb5

    SHA1

    ed1ffbeba9497ca0bb57c3c025fc7b9963403aae

    SHA256

    9b34385489b6b23b7b03509b9b10590e5c4bdb7f718c14b174ba33bb1b19bb96

    SHA512

    e63f26c66c3026e96633d76a8658dd03cf1c5620b2a5dbd7b78f0193f82af6a5894cd90ea6bcb5c4f489d3018dd03c35b6d2b09ec7ca709e4f88457f5cfb56d5