a5c8e40f63dba11cfd19cbdb005875a5ef4934485a06b5497d988e254ff83272 | Triage

Analysis

max time kernel
130s
max time network
142s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
24-01-2024 22:17

Sharing

Report Analysis Logs

General

Target

72fdb66076a4a877ff7324188ca83b27.exe
Size

466KB
MD5

72fdb66076a4a877ff7324188ca83b27
SHA1

780767eb683e7f6cfae5156827efa3d15daa6449
SHA256

a5c8e40f63dba11cfd19cbdb005875a5ef4934485a06b5497d988e254ff83272
SHA512

4f50666e9d0a22775cf03764760045958dab1f9b3a00e157da3fd94d974abb2bf42837eee8ac72947612a80b072d4692a15f0f309563710abe96b59e5f7911d1
SSDEEP

12288:IROOkT4GvPEIf5xVII4GLXRbzNHyc4NyUnm4rM7xK:uOrxTIULB5d4NytScK

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
308	72fdb66076a4a877ff7324188ca83b27.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
308	72fdb66076a4a877ff7324188ca83b27.exe
308	72fdb66076a4a877ff7324188ca83b27.exe

C:\Users\Admin\AppData\Local\Temp\72fdb66076a4a877ff7324188ca83b27.exe
"C:\Users\Admin\AppData\Local\Temp\72fdb66076a4a877ff7324188ca83b27.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:308

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/308-0-0x0000000000220000-0x0000000000221000-memory.dmp

Filesize
4KB

Download
memory/308-1-0x0000000000220000-0x0000000000221000-memory.dmp

Filesize
4KB

Download