1ec2641fcd6185474818db8533257ed5c0e11ac84850ce15451964f73ff09a68 | Triage

Analysis

max time kernel
150s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
16-03-2024 05:10

Sharing

Report Analysis Logs

General

Target

cd30a07e001c4990db4770204d1f8f6c.exe
Size

2.1MB
MD5

cd30a07e001c4990db4770204d1f8f6c
SHA1

70122e8422cf478455e75183b2db70a354f18df7
SHA256

1ec2641fcd6185474818db8533257ed5c0e11ac84850ce15451964f73ff09a68
SHA512

fdfc4867dc346160d2ccfacb054976e01e985cce297cafc0fd584c812cc12690be1c90105562d9fcec7a78cad22fd04c844b24d2c3620f788e49851471b42102
SSDEEP

49152:gIQCy6q68qXAfRnSLyN2IkwBiJOKXaKqcV64xvEpg:lQCy6qtS82IrQJOoqQv

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1836	cd30a07e001c4990db4770204d1f8f6c.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1836	cd30a07e001c4990db4770204d1f8f6c.exe
1836	cd30a07e001c4990db4770204d1f8f6c.exe

C:\Users\Admin\AppData\Local\Temp\cd30a07e001c4990db4770204d1f8f6c.exe
"C:\Users\Admin\AppData\Local\Temp\cd30a07e001c4990db4770204d1f8f6c.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1836

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1836-0-0x0000000000400000-0x0000000001278000-memory.dmp

Filesize
14.5MB

Download
memory/1836-1-0x0000000003000000-0x0000000003001000-memory.dmp

Filesize
4KB

Download
memory/1836-41-0x0000000000400000-0x0000000001278000-memory.dmp

Filesize
14.5MB

Download
memory/1836-42-0x0000000003000000-0x0000000003001000-memory.dmp

Filesize
4KB

Download