Analysis

  • max time kernel
    141s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14-02-2024 17:25

General

  • Target

    $TEMP/gikWp/rdxYDEC.exe

  • Size

    47KB

  • MD5

    761f7858d8b65eb884d387fd96da0b0d

  • SHA1

    b68f78367c6d36026b75715d2906cbac65cef1dd

  • SHA256

    88cba66e9c7e8d35e440026a0cfaa67882535faec3f5805d3aa2b3110e41fe76

  • SHA512

    2378963b482da68ff20e0b1721cd33a2655c3a2df2ae49f81c501c94c0616ed8d935fb55963e909db7e0aa46f57b3c5f645af6e3a3e477c7415166acb99e200c

  • SSDEEP

    768:eZ8qC6wsKMi/wCbo496wtHEUXPyRvk2/6sYot4ot7tp4tyt3:egBwmawtHYRc5SJtut23

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\$TEMP\gikWp\rdxYDEC.exe
    "C:\Users\Admin\AppData\Local\Temp\$TEMP\gikWp\rdxYDEC.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2884

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2884-0-0x0000000002160000-0x00000000021E0000-memory.dmp

    Filesize

    512KB

  • memory/2884-20-0x0000000002230000-0x0000000002231000-memory.dmp

    Filesize

    4KB

  • memory/2884-23-0x0000000000400000-0x0000000000411000-memory.dmp

    Filesize

    68KB

  • memory/2884-25-0x0000000002160000-0x00000000021E0000-memory.dmp

    Filesize

    512KB