Analysis

  • max time kernel
    92s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/01/2024, 21:41

General

  • Target

    9liao.exe

  • Size

    320KB

  • MD5

    b6cf3b3f4b2f40f343e27bdc5976a151

  • SHA1

    d276884f41e65173ef8754ed2ad86624e7a10ffb

  • SHA256

    a654d8a6837112a61e51be6f4d7f3e34d07f6e96ae6c78fc6211688be5019ff6

  • SHA512

    08f52a1f498fdf986c17f1a007c01ec20b929ddfccfc8e10f452e463b6ea06527ad32988daf4b8d23ad35412e192cdf0848c6d4d371973681468d46907d62afe

  • SSDEEP

    6144:qH0nQrUiSKrWubrSGxvGTQrGI2Lu5Zdh5GnvfazH1uYwxds:lnQrUiSKCuSGxvgPPY6e

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9liao.exe
    "C:\Users\Admin\AppData\Local\Temp\9liao.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:224

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/224-4-0x00000000040E0000-0x0000000004116000-memory.dmp

    Filesize

    216KB

  • memory/224-2-0x0000000004090000-0x00000000040D1000-memory.dmp

    Filesize

    260KB

  • memory/224-0-0x0000000003F80000-0x000000000408C000-memory.dmp

    Filesize

    1.0MB