Analysis

  • max time kernel
    150s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05-01-2024 00:15

General

  • Target

    4247bdc7ce548c4e8c15e4f3fb7d6756.exe

  • Size

    502KB

  • MD5

    4247bdc7ce548c4e8c15e4f3fb7d6756

  • SHA1

    cf30310cc3c418f5b0df0152df094b0d87d2f91a

  • SHA256

    c0d8fbd19628b939b839a51f60215cde808ec5707ec0d742ab40673bbffaa20a

  • SHA512

    3125382092cbe987ab66af36c2bc83601cd4566eacf27e6c2f6df919bb2104cbfa51af814091a89cb06b62a4fd535911eed2040fa7ebf1e561ab21c7152abf61

  • SSDEEP

    12288:/UIeT5O2rGzh6Xyxte0UUZLTH8fmM63+dY5watq7l:veTsL0yHQUZLrvp3LOatq

Score
5/10

Malware Config

Signatures

  • Drops file in System32 directory 2 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4247bdc7ce548c4e8c15e4f3fb7d6756.exe
    "C:\Users\Admin\AppData\Local\Temp\4247bdc7ce548c4e8c15e4f3fb7d6756.exe"
    1⤵
    • Drops file in System32 directory
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1748

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1748-1-0x0000000002450000-0x0000000002451000-memory.dmp

    Filesize

    4KB

  • memory/1748-0-0x00000000001C0000-0x00000000001C9000-memory.dmp

    Filesize

    36KB

  • memory/1748-4-0x0000000000400000-0x0000000000572000-memory.dmp

    Filesize

    1.4MB

  • memory/1748-5-0x0000000000400000-0x0000000000572000-memory.dmp

    Filesize

    1.4MB

  • memory/1748-6-0x0000000002450000-0x0000000002451000-memory.dmp

    Filesize

    4KB

  • memory/1748-7-0x0000000000400000-0x0000000000572000-memory.dmp

    Filesize

    1.4MB