Analysis

  • max time kernel
    166s
  • max time network
    201s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/03/2024, 11:58

General

  • Target

    ddqjh_wqeqd.exe

  • Size

    31KB

  • MD5

    c35a26f177a905feb02adbb2d7db5c00

  • SHA1

    70f5a756fa020fedad901014206f4069cdd024c3

  • SHA256

    362a34664946a5fe654fe5f3286392d88c256962a1a0dc4342dc4fd0db47f299

  • SHA512

    79c62acc778f131ae4ab070c309a4452c2d84b22b06ca499e5bf158a80aff20f0c1fcbb810374f8c1b9b8314aecc52f7818e7a241d354c0675ac2e73e8c233c1

  • SSDEEP

    384:BUthoe0T99FVAL6zpA7AYDhwaEk3i8FnI9Y/QwapWOIl8fKP1AePnYPL4odu:BLe0FFzp4Df5X/QdpWBl8fKP1jwdu

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ddqjh_wqeqd.exe
    "C:\Users\Admin\AppData\Local\Temp\ddqjh_wqeqd.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:464

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/464-3-0x0000000002810000-0x0000000002811000-memory.dmp

    Filesize

    4KB

  • memory/464-4-0x0000000002810000-0x0000000002811000-memory.dmp

    Filesize

    4KB