Analysis

  • max time kernel
    145s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/01/2024, 01:36

General

  • Target

    736410389d78d694e04d2876ef036282.exe

  • Size

    204KB

  • MD5

    736410389d78d694e04d2876ef036282

  • SHA1

    6111992309cb55e6d372a70fb53affc276f56cbc

  • SHA256

    c20d48528047cfb1ecccb4cacd1eb39d21fdcee15b180490f89fc8f877b7a91c

  • SHA512

    5c25e304cd2260f9a4b40fbf9aff88c1a7cab4131db851d1d7d4df7e7563669bb34425bda78b94aad8e630098190c7e8ebb79d4a1bc9b1c6a1d0859ecc82e693

  • SSDEEP

    6144:fjmH+RWv+vgWgEOic78kL5afUXp1SO3jXv9f/d5Y73+OK:fjZZvghEONL5aMPD3jXlHQ7rK

Score
5/10

Malware Config

Signatures

  • Drops file in System32 directory 5 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\736410389d78d694e04d2876ef036282.exe
    "C:\Users\Admin\AppData\Local\Temp\736410389d78d694e04d2876ef036282.exe"
    1⤵
    • Drops file in System32 directory
    • Suspicious use of SetWindowsHookEx
    PID:2780

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Windows\SysWOW64\ctfm0n.exe

          Filesize

          204KB

          MD5

          736410389d78d694e04d2876ef036282

          SHA1

          6111992309cb55e6d372a70fb53affc276f56cbc

          SHA256

          c20d48528047cfb1ecccb4cacd1eb39d21fdcee15b180490f89fc8f877b7a91c

          SHA512

          5c25e304cd2260f9a4b40fbf9aff88c1a7cab4131db851d1d7d4df7e7563669bb34425bda78b94aad8e630098190c7e8ebb79d4a1bc9b1c6a1d0859ecc82e693

        • memory/2780-0-0x0000000000400000-0x000000000044B000-memory.dmp

          Filesize

          300KB

        • memory/2780-2-0x0000000000400000-0x000000000044B000-memory.dmp

          Filesize

          300KB

        • memory/2780-27-0x0000000000400000-0x000000000044B000-memory.dmp

          Filesize

          300KB