913ecfd11233aba6a8af3480baa08d21d4d34729891e7caf840198393fc135d9 | Triage

Analysis

max time kernel
138s
max time network
168s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
19-04-2024 03:08

Sharing

Report Analysis Logs

General

Target

Box/4399LiveUpdate.exe
Size

425KB
MD5

7f68fae67d14d38620710b464d27b93d
SHA1

b0bf5bb1733f0d4b65eafa1ac0b18487bc152b5c
SHA256

523327e8b4c570d9475cd3879345d206a6c0db2eedb5942e590317fdaa35a208
SHA512

40f37937bfd2e7fb8d29a6f09fa9b62d6e0a5a8dc7e96c538f08738df72e807aa492461cfab0454723d6ead8d1b20390829b5c8bd35cec706c43299473aecce8
SSDEEP

12288:Ph7xp8oaqmeAukluJEAoeIY4MnAZ74TfPbQ5:PhQS6ukwOAo/LZ74TfDQ5

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

4399LiveUpdate.exe

pid process

2928 4399LiveUpdate.exe
2928 4399LiveUpdate.exe

C:\Users\Admin\AppData\Local\Temp\Box\4399LiveUpdate.exe
"C:\Users\Admin\AppData\Local\Temp\Box\4399LiveUpdate.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2928

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...