Analysis

  • max time kernel
    149s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/03/2024, 17:44

General

  • Target

    $EXEFILE.exe

  • Size

    6KB

  • MD5

    e07c9c6343b4028fabbb27bda806bc7e

  • SHA1

    cfbe47105cf1e8bdbe9f50b46201baceddf87872

  • SHA256

    fd0f8abb0207a4a00bfc84be8b9c0b125b60a54d3b08521091322339f11cb71d

  • SHA512

    1f7293fe69688aed3d3eb7cab2175d6516f9450ed90a4ce9beafe185dde12a9777e385d481cddf419d5483bac4bc1ba8fd0e1be2e21447e300e76182b05ce482

  • SSDEEP

    96:I7x4GFlhgpfbhTX/Rfo/EsL2fZ3wLBOCCNmaxhtwwT:4xVfKbFX/RASR3RCgHp

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\$EXEFILE.exe
    "C:\Users\Admin\AppData\Local\Temp\$EXEFILE.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:860

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/860-0-0x00007FFAA57C0000-0x00007FFAA6161000-memory.dmp

          Filesize

          9.6MB

        • memory/860-1-0x0000000000D90000-0x0000000000DA0000-memory.dmp

          Filesize

          64KB

        • memory/860-2-0x00007FFAA57C0000-0x00007FFAA6161000-memory.dmp

          Filesize

          9.6MB

        • memory/860-3-0x000000001B1B0000-0x000000001B1F2000-memory.dmp

          Filesize

          264KB

        • memory/860-4-0x000000001B770000-0x000000001BC3E000-memory.dmp

          Filesize

          4.8MB

        • memory/860-5-0x000000001BC40000-0x000000001BCDC000-memory.dmp

          Filesize

          624KB

        • memory/860-6-0x0000000000C20000-0x0000000000C28000-memory.dmp

          Filesize

          32KB

        • memory/860-7-0x0000000000D90000-0x0000000000DA0000-memory.dmp

          Filesize

          64KB

        • memory/860-8-0x0000000000D90000-0x0000000000DA0000-memory.dmp

          Filesize

          64KB

        • memory/860-9-0x0000000000D90000-0x0000000000DA0000-memory.dmp

          Filesize

          64KB

        • memory/860-12-0x00007FFAA57C0000-0x00007FFAA6161000-memory.dmp

          Filesize

          9.6MB