Analysis

  • max time kernel
    147s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/01/2024, 22:53

General

  • Target

    17520bc71a4e920a15bc2b34059cfbef182b8984f13dad009b29f5dc3e6afadb.exe

  • Size

    8.5MB

  • MD5

    cfa85d9a85f1f8208b126ee3b063453b

  • SHA1

    4db9e1c8a5e98added5942d2f391d62cfa6e3442

  • SHA256

    17520bc71a4e920a15bc2b34059cfbef182b8984f13dad009b29f5dc3e6afadb

  • SHA512

    6a2d7e4fde64f53a46d70fd620508e91708c9aacc05faa52b9c115c5a95793aed5d3aa036856d19dee8f50467aaa3d536bc1166c56f4e4b2aeb9d03128f2372a

  • SSDEEP

    196608:LBSXXmCuUpLm/HGa8Pl17jOSRvSx03NJPrNP:9uXAUZmO1Pz7j9qiN9h

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\17520bc71a4e920a15bc2b34059cfbef182b8984f13dad009b29f5dc3e6afadb.exe
    "C:\Users\Admin\AppData\Local\Temp\17520bc71a4e920a15bc2b34059cfbef182b8984f13dad009b29f5dc3e6afadb.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2860

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2860-0-0x00000000003D0000-0x0000000001352000-memory.dmp

    Filesize

    15.5MB

  • memory/2860-1-0x00000000034C0000-0x00000000034C1000-memory.dmp

    Filesize

    4KB

  • memory/2860-8-0x0000000003550000-0x0000000003551000-memory.dmp

    Filesize

    4KB

  • memory/2860-7-0x0000000003540000-0x0000000003541000-memory.dmp

    Filesize

    4KB

  • memory/2860-9-0x00000000003D0000-0x0000000001352000-memory.dmp

    Filesize

    15.5MB

  • memory/2860-6-0x0000000003520000-0x0000000003521000-memory.dmp

    Filesize

    4KB

  • memory/2860-5-0x0000000003510000-0x0000000003511000-memory.dmp

    Filesize

    4KB

  • memory/2860-4-0x00000000034E0000-0x00000000034E1000-memory.dmp

    Filesize

    4KB

  • memory/2860-3-0x00000000003D0000-0x0000000001352000-memory.dmp

    Filesize

    15.5MB

  • memory/2860-2-0x00000000034D0000-0x00000000034D1000-memory.dmp

    Filesize

    4KB

  • memory/2860-12-0x00000000003D0000-0x0000000001352000-memory.dmp

    Filesize

    15.5MB