d005c57d0622e735286bedfec35ccfe570127dee62e17952816cf4039d42ce44 | Triage

Analysis

max time kernel
119s
max time network
131s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
19-01-2024 05:19

Sharing

Report Analysis Logs

General

Target

66cbeceb8a5e7bd84765a8b6013f9a00.exe
Size

32KB
MD5

66cbeceb8a5e7bd84765a8b6013f9a00
SHA1

f2e499d05be81f0d3a343f51210bf209f39b0779
SHA256

d005c57d0622e735286bedfec35ccfe570127dee62e17952816cf4039d42ce44
SHA512

370f4f7b98822a57eb7e2f8bf2e045b27ae277e40f0bb66000985dbc812458d1f486c05bedbc40bd535f42942022e6a26a01f3ad032fd4cbff0022797f570063
SSDEEP

384:tMDNeLNek+vD3AS1nmg0XIUZK1HzTNJDsNo+Nek+vDNNe:tMnArgfUszTNpsNo

Score

4^/10

Malware Config

Signatures

Drops file in Windows directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\MSASS.EXE	66cbeceb8a5e7bd84765a8b6013f9a00.exe
File created	C:\Windows\MSASS.EXE	66cbeceb8a5e7bd84765a8b6013f9a00.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2472	66cbeceb8a5e7bd84765a8b6013f9a00.exe

C:\Users\Admin\AppData\Local\Temp\66cbeceb8a5e7bd84765a8b6013f9a00.exe
"C:\Users\Admin\AppData\Local\Temp\66cbeceb8a5e7bd84765a8b6013f9a00.exe"
1⤵
- Drops file in Windows directory
- Suspicious use of SetWindowsHookEx
PID:2472

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads