cc3fbfa0fa74fbc726e44e82698122ef072faba171c51b65c769b79b359d6790 | Triage

Analysis

max time kernel
143s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
27/01/2024, 22:19

Sharing

Report Analysis Logs

General

Target

$TEMP/UBIKeyService.exe
Size

925KB
MD5

4e459af1454c80755092c7456cb04259
SHA1

456f8a13dc1744c64d2b93da86b6141087c066bc
SHA256

53f89189bee930b2512978be079978bcea3bb6004c45d8ccb52d96b51eb22002
SHA512

9af836489bf21e3ef8b87e7a33cf7a54d0ccbf15d9bb385c04b1848522ec91bcc5358d85fb8284d922986d4101ee5503c74bc24a5adb5b3355ef1f9f74a5fa1a
SSDEEP

24576:Ap7iK+JjtEHPQe4XebaaTiU3VitVzWse4yQ:ANkEHoeHbaaTiY0VkI

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4552	UBIKeyService.exe
4552	UBIKeyService.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
4552	UBIKeyService.exe
4552	UBIKeyService.exe
4552	UBIKeyService.exe

C:\Users\Admin\AppData\Local\Temp\$TEMP\UBIKeyService.exe
"C:\Users\Admin\AppData\Local\Temp\$TEMP\UBIKeyService.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4552

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads