Analysis

  • max time kernel
    150s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14/03/2024, 19:36

General

  • Target

    c971f129c2a02a53625af37880aaff88.exe

  • Size

    658KB

  • MD5

    c971f129c2a02a53625af37880aaff88

  • SHA1

    1021f7b8dcb2dd5aea0fda1b5915e1fecae1e331

  • SHA256

    8f7925a4eedfba39030707caef0d61ea4a8d1a75470075443d821b1365646917

  • SHA512

    b5653ab5584c18faef528fc3d7e8a80b8085087315128218e71470b954a62ce4e90a5c9ca361c2a2293a8adfb58964f33be95d2de1c15133d77593a80c775735

  • SSDEEP

    12288:hIqW9h5g0uTA7Wswdsu7JYeAa4nkI3B+J55fL/UBcAifYi9Q2ZSafdLBpsl:hIq0A0QA7WswdsgJYta4nHBGL/UJi990

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c971f129c2a02a53625af37880aaff88.exe
    "C:\Users\Admin\AppData\Local\Temp\c971f129c2a02a53625af37880aaff88.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2304

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\offconfig.temp

          Filesize

          579B

          MD5

          c50bea5e5b9659d431cf81a02579cecd

          SHA1

          a001c0be3cf5033a0c8caf703026e0c193478274

          SHA256

          c04245105f674881f98cc991892592e6cf04a2b67f0e13d03b0ccc757abdfc9f

          SHA512

          8c2d9830ddacf8753aef5ff92cfe17ccadbda46adffb0710df8ee04905b2e06fb3183c5a31444a0990186d89a0246829005b64b9b3ce1761a5bf375ae4519b7f