f73b5ddee602453364fa40dabfab33a8b192d59211ef7056f0196da4ff4a54c0 | Triage

Resubmissions

24/02/2024, 16:45

240224-t9jsjsgg37 5

Analysis

max time kernel
138s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
24/02/2024, 16:45

Sharing

Report Analysis Logs

General

Target

CSVConv.exe
Size

227KB
MD5

95efccb778957cb05dcd939907840a17
SHA1

8f20dc1a4a9de46cee94eb374f9075b8ca7dbbe5
SHA256

ce490f9f2fd23dbb27cf7fca051920b900e2a6140cf7548d63c671047abd5e32
SHA512

556cd4064d0de4787bd21abc8792fd17c402504fdd6c5a2dd30dcb7a4a3d8e236b37a59a66e11b5ce6e71f2635b7369ca76882047fefd8f2a7db150def713eba
SSDEEP

6144:Oeswhy11zYfHsRqQJdEvYxWGQxBGA9GKxTX:nsQQgvPGQ/HtT

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2068	CSVConv.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2068	CSVConv.exe
2068	CSVConv.exe

C:\Users\Admin\AppData\Local\Temp\CSVConv.exe
"C:\Users\Admin\AppData\Local\Temp\CSVConv.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2068

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads