a5c8e40f63dba11cfd19cbdb005875a5ef4934485a06b5497d988e254ff83272 | Triage

Analysis

max time kernel
145s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
24/01/2024, 22:17

Sharing

Report Analysis Logs

General

Target

72fdb66076a4a877ff7324188ca83b27.exe
Size

466KB
MD5

72fdb66076a4a877ff7324188ca83b27
SHA1

780767eb683e7f6cfae5156827efa3d15daa6449
SHA256

a5c8e40f63dba11cfd19cbdb005875a5ef4934485a06b5497d988e254ff83272
SHA512

4f50666e9d0a22775cf03764760045958dab1f9b3a00e157da3fd94d974abb2bf42837eee8ac72947612a80b072d4692a15f0f309563710abe96b59e5f7911d1
SSDEEP

12288:IROOkT4GvPEIf5xVII4GLXRbzNHyc4NyUnm4rM7xK:uOrxTIULB5d4NytScK

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4132	72fdb66076a4a877ff7324188ca83b27.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4132	72fdb66076a4a877ff7324188ca83b27.exe
4132	72fdb66076a4a877ff7324188ca83b27.exe

C:\Users\Admin\AppData\Local\Temp\72fdb66076a4a877ff7324188ca83b27.exe
"C:\Users\Admin\AppData\Local\Temp\72fdb66076a4a877ff7324188ca83b27.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:4132

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4132-0-0x0000000000AB0000-0x0000000000AB1000-memory.dmp

Filesize
4KB

Download
memory/4132-1-0x0000000000AB0000-0x0000000000AB1000-memory.dmp

Filesize
4KB

Download