Analysis

  • max time kernel
    0s
  • max time network
    20s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240221-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26-02-2024 02:14

General

  • Target

    a52ee5952971f06207484b70ef4db701.exe

  • Size

    534KB

  • MD5

    a52ee5952971f06207484b70ef4db701

  • SHA1

    63b1fa086b655c080ee192568a431b8e6f909596

  • SHA256

    8635fc5fba6998e0d41633828c656dc79898e5a5d3146c943ee35fde37c29946

  • SHA512

    acef8ac8694f0b13a614681ac7163efc11b12a39e4bdbde83f5c3041545d00d6460bc65d5fe995f38e159de8394531f218b4a0e758157acdce4ebce096398f30

  • SSDEEP

    12288:NopMmVHZUm1Cu0/2ufK/lGRgOUqmq9kR6lhKXGSR0mSuraB8B0/pGO:NSM+aWCuMRK/cRgOnmq9g61ura2BMGO

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a52ee5952971f06207484b70ef4db701.exe
    "C:\Users\Admin\AppData\Local\Temp\a52ee5952971f06207484b70ef4db701.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3184
    • C:\Users\Admin\AppData\Local\Temp\a52ee5952971f06207484b70ef4db701.exe
      C:\Users\Admin\AppData\Local\Temp\a52ee5952971f06207484b70ef4db701.exe
      2⤵
        PID:4356

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3184-0-0x0000000000400000-0x000000000048E000-memory.dmp

      Filesize

      568KB

    • memory/3184-1-0x00000000022B0000-0x0000000002310000-memory.dmp

      Filesize

      384KB

    • memory/3184-2-0x0000000002260000-0x0000000002261000-memory.dmp

      Filesize

      4KB

    • memory/3184-3-0x0000000002250000-0x0000000002251000-memory.dmp

      Filesize

      4KB

    • memory/3184-4-0x0000000002330000-0x0000000002331000-memory.dmp

      Filesize

      4KB

    • memory/3184-5-0x0000000002240000-0x0000000002241000-memory.dmp

      Filesize

      4KB

    • memory/3184-6-0x0000000002350000-0x0000000002351000-memory.dmp

      Filesize

      4KB

    • memory/3184-8-0x0000000002340000-0x0000000002341000-memory.dmp

      Filesize

      4KB

    • memory/3184-9-0x0000000003B00000-0x0000000003B01000-memory.dmp

      Filesize

      4KB

    • memory/3184-7-0x0000000002280000-0x0000000002281000-memory.dmp

      Filesize

      4KB

    • memory/3184-11-0x0000000002320000-0x0000000002321000-memory.dmp

      Filesize

      4KB

    • memory/3184-12-0x0000000003AF0000-0x0000000003AF8000-memory.dmp

      Filesize

      32KB

    • memory/3184-13-0x0000000002BE0000-0x0000000002BE1000-memory.dmp

      Filesize

      4KB

    • memory/3184-14-0x0000000002BD0000-0x0000000002BD1000-memory.dmp

      Filesize

      4KB

    • memory/3184-16-0x0000000002C30000-0x0000000002C31000-memory.dmp

      Filesize

      4KB

    • memory/3184-17-0x0000000002C00000-0x0000000002C01000-memory.dmp

      Filesize

      4KB

    • memory/3184-18-0x0000000002370000-0x0000000002371000-memory.dmp

      Filesize

      4KB

    • memory/3184-19-0x0000000002C40000-0x0000000002C41000-memory.dmp

      Filesize

      4KB

    • memory/3184-20-0x0000000002C90000-0x0000000002C91000-memory.dmp

      Filesize

      4KB

    • memory/3184-21-0x0000000002C80000-0x0000000002C81000-memory.dmp

      Filesize

      4KB

    • memory/3184-23-0x0000000002CB0000-0x0000000002CB1000-memory.dmp

      Filesize

      4KB

    • memory/3184-22-0x0000000002C70000-0x0000000002C71000-memory.dmp

      Filesize

      4KB

    • memory/3184-24-0x0000000002CD0000-0x0000000002CD1000-memory.dmp

      Filesize

      4KB