7c6e588ecef08afdc346bbc8cc2c0e143798e127fcdc4c41352858b2c614cf2a | Triage

Analysis

max time kernel
140s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
14-02-2024 17:25

Sharing

Report Analysis Logs

General

Target

$TEMP/gikWp/rdxYDEC.exe
Size

47KB
MD5

761f7858d8b65eb884d387fd96da0b0d
SHA1

b68f78367c6d36026b75715d2906cbac65cef1dd
SHA256

88cba66e9c7e8d35e440026a0cfaa67882535faec3f5805d3aa2b3110e41fe76
SHA512

2378963b482da68ff20e0b1721cd33a2655c3a2df2ae49f81c501c94c0616ed8d935fb55963e909db7e0aa46f57b3c5f645af6e3a3e477c7415166acb99e200c
SSDEEP

768:eZ8qC6wsKMi/wCbo496wtHEUXPyRvk2/6sYot4ot7tp4tyt3:egBwmawtHYRc5SJtut23

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
3032	rdxYDEC.exe
3032	rdxYDEC.exe
3032	rdxYDEC.exe

C:\Users\Admin\AppData\Local\Temp\$TEMP\gikWp\rdxYDEC.exe
"C:\Users\Admin\AppData\Local\Temp\$TEMP\gikWp\rdxYDEC.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3032

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3032-19-0x00000000001B0000-0x00000000001B1000-memory.dmp

Filesize
4KB

Download
memory/3032-32-0x0000000000400000-0x0000000000411000-memory.dmp

Filesize
68KB

Download