2f3399d240d8369434083c72e47bfc7e22bc05ec65dde3b6b3103b1152503ffb | Triage

Analysis

max time kernel
142s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
12-02-2024 18:06

Sharing

Report Analysis Logs

General

Target

LAKI kopu.exe
Size

1.2MB
MD5

627f54b628bb5ec9c3b4f7c069f0b1fe
SHA1

dd0cba3b60c4693bd930fb3fc42fb9774d90472e
SHA256

2f3399d240d8369434083c72e47bfc7e22bc05ec65dde3b6b3103b1152503ffb
SHA512

0aa91b21cd93e2c6d07721e41b02e861443b4fb5729a3781861b8221f78250e71b1f586a5df281479f31809bc6a38ce852c5e5ceab1ab69e73d9f338fdb55b39
SSDEEP

24576:/Zsm9o0bL7Otn7LseQIY62WGd42z/TDonCsb6bwAh:xsm9oaL7OtnUFIn2WK42zwnh2d

Score

1^/10

Malware Config

Signatures

Suspicious use of FindShellTrayWindow 1 IoCs

Processes:

LAKI kopu.exe

pid process

2832 LAKI kopu.exe
Suspicious use of SendNotifyMessage 1 IoCs

Processes:

LAKI kopu.exe

pid process

2832 LAKI kopu.exe
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

LAKI kopu.exe

pid process

2832 LAKI kopu.exe

C:\Users\Admin\AppData\Local\Temp\LAKI kopu.exe
"C:\Users\Admin\AppData\Local\Temp\LAKI kopu.exe"
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2832

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\gui.png

Filesize
136KB

MD5
d5ab828ddb51a142d399f6afcb1c6ca0

SHA1
8c8f0add6ecf3fbd1570e4c4fb0f4fb3e44ded02

SHA256
3241174d2c93eff098c563027cfd668ba41e087aa6199d32f14b9532490cd9f1

SHA512
10c222a371412ee018e09292d7cb99f58e518103db2fa6382c20a034bfebccf31f9de1e0b8bdf16d1ced331a72bf4f3248b24f44f006ea79361721b4145a0de7

Download Submit