bb231edffd746ffcab7c11330e73036d096a6f80ad032da2f641e67acc7de662 | Triage

Analysis

max time kernel
1157s
max time network
1165s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
12-02-2024 17:35

Sharing

Report Analysis Logs

General

Target

Buckshot Roulette.exe
Size

369.9MB
MD5

505446c935ff4af29bb62a2ad16dcf7d
SHA1

4602b18ccfa541eca9e19098e96aef6454f6e1ef
SHA256

95edf1435e855231295bb1d2e2dbc501f931618e35e7a9b9bb053718a7eb9e0f
SHA512

a5129aa532f2eada23a57c803cfc8a1d21da34e866e3605d25491ba3a5b71fc91982cae51f929f7256882d63ff942b432b9de0fd4c062a13687ef6e9baf4f4fe
SSDEEP

6291456:TPjxORZO1A+NAM2Sy3Qg9pKfGpEaa7uPgNZjl:7joRk1AiAMTy3Qg9pKfGpEaa7ueh

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2412	Buckshot Roulette.exe

C:\Users\Admin\AppData\Local\Temp\Buckshot Roulette.exe
"C:\Users\Admin\AppData\Local\Temp\Buckshot Roulette.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2412

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2412-1-0x00007FF7B6000000-0x00007FF7BA32E000-memory.dmp

Filesize
67.2MB

Download