417ed63270f63116d877c6921383b559897b4bc316cc8396f20275832aa11ea4 | Triage

Analysis

max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
12-01-2024 14:50

Sharing

Report Analysis Logs

General

Target

56c179b29a6ff29ca575522615fe2cd2.exe
Size

20KB
MD5

56c179b29a6ff29ca575522615fe2cd2
SHA1

76622d8d3803f6596a739dc37b4409eb1d4090c3
SHA256

417ed63270f63116d877c6921383b559897b4bc316cc8396f20275832aa11ea4
SHA512

c345a14918339a76b1b2ada7100fdca0d54892f91e76bffc1dd86b95fe2241437acdbabe946d1132b2db678b42fd5f89f1990db31eb0d0b3942946e534db3082
SSDEEP

192:62UgLpZfF61L7eKAeP3ZLmDTdrHnmmCVTokBUg:jpZN6QKAe/ZETxmPok

Score

4^/10

Malware Config

Signatures

Drops file in Windows directory 2 IoCs

description	ioc	Process
File created	C:\WINDOWS\system\wincal.exe	56c179b29a6ff29ca575522615fe2cd2.exe
File opened for modification	C:\WINDOWS\system\wincal.exe	56c179b29a6ff29ca575522615fe2cd2.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1056	56c179b29a6ff29ca575522615fe2cd2.exe

C:\Users\Admin\AppData\Local\Temp\56c179b29a6ff29ca575522615fe2cd2.exe
"C:\Users\Admin\AppData\Local\Temp\56c179b29a6ff29ca575522615fe2cd2.exe"
1⤵
- Drops file in Windows directory
- Suspicious use of SetWindowsHookEx
PID:1056

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads