Analysis

  • max time kernel
    0s
  • max time network
    136s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    31-12-2023 04:32

General

  • Target

    284866b17009b7c1888161c119461c48.exe

  • Size

    207KB

  • MD5

    284866b17009b7c1888161c119461c48

  • SHA1

    e324fcaaf797c57cd0b01aef731e1ca571faf323

  • SHA256

    193cce610312e0124518edca8ef5e0e8e1a47b75f7bba50128ceed474e277cc0

  • SHA512

    60eaab9685312baf2a01bc025cbe679b0cc43460e7b1ad5becfc925b2255a49b37b0d1517e409142e29bdd5028730b021b7d426c1bddd5da755aa25cc3066bbe

  • SSDEEP

    6144:GdoaPZDAWA9MeMSj6Y0eTG/O5qfw7+ggMSyp:cpAVHR6YJ2O5Iw76yp

Score
6/10

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\284866b17009b7c1888161c119461c48.exe
    "C:\Users\Admin\AppData\Local\Temp\284866b17009b7c1888161c119461c48.exe"
    1⤵
    • Adds Run key to start application
    • Suspicious use of SetWindowsHookEx
    PID:396

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/396-0-0x0000000000400000-0x000000000043B000-memory.dmp

    Filesize

    236KB

  • memory/396-5-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

    Filesize

    368KB

  • memory/396-9-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

    Filesize

    368KB

  • memory/396-10-0x0000000000400000-0x000000000043B000-memory.dmp

    Filesize

    236KB

  • memory/396-8-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

    Filesize

    368KB

  • memory/396-13-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

    Filesize

    368KB

  • memory/396-7-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

    Filesize

    368KB

  • memory/396-6-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

    Filesize

    368KB

  • memory/396-4-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

    Filesize

    368KB

  • memory/396-3-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

    Filesize

    368KB

  • memory/396-2-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

    Filesize

    368KB

  • memory/396-1-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

    Filesize

    368KB

  • memory/396-14-0x0000000000400000-0x000000000043B000-memory.dmp

    Filesize

    236KB

  • memory/396-16-0x000000007FDF0000-0x000000007FE4C000-memory.dmp

    Filesize

    368KB