9f60166d7f1e14479f621b966091c6925f2066b24a219d05bd98fa3efc40a9b0 | Triage

Analysis

max time kernel
117s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
04/01/2024, 16:48

Sharing

Report Analysis Logs

General

Target

4163d177f55e8cf6435776884001f761.exe
Size

80KB
MD5

4163d177f55e8cf6435776884001f761
SHA1

b72a577a68cd0cb1779fd4f89678d2dc7d4371ed
SHA256

9f60166d7f1e14479f621b966091c6925f2066b24a219d05bd98fa3efc40a9b0
SHA512

bfd62b6a76067f47dfa718abf8e0e67ae4939cf3d1b11ba98eb8394bc0190c82650da891452e36cf47bae0a0af6007e50b4033e86add07cd76ab64d53b952360
SSDEEP

1536:OvsXXmOGXBLShSx9FIa2YntHAyQYS/LSZXmOGX6s:KsHsSeTIa2YlWYuq9s

Score

4^/10

Malware Config

Signatures

Drops file in Windows directory 2 IoCs

description	ioc	Process
File opened for modification	\??\c:\windows\inf\chicagoa.hlp	4163d177f55e8cf6435776884001f761.exe
File opened for modification	C:\windows\inf\usermail.hlp	4163d177f55e8cf6435776884001f761.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2384	4163d177f55e8cf6435776884001f761.exe

C:\Users\Admin\AppData\Local\Temp\4163d177f55e8cf6435776884001f761.exe
"C:\Users\Admin\AppData\Local\Temp\4163d177f55e8cf6435776884001f761.exe"
1⤵
- Drops file in Windows directory
- Suspicious use of SetWindowsHookEx
PID:2384

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads