b524eca27783c855174956aa3ae28efd60e0ba0cfc305f8be80336527c56e5e8 | Triage

Analysis

max time kernel
142s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
20-04-2024 15:50

Sharing

Report Analysis Logs

General

Target

x2/X2A.exe
Size

11.7MB
MD5

066adbdf1d01db495d494aca5f72e41f
SHA1

6f98d9c4a0ae85023d4f77a50ed2fd4771e3a19f
SHA256

fef1cad271e2f8aed0e557561577fe6f1ecdb4fbf16a810755d5a90c8f05cf02
SHA512

d3d8eb6c38d88781a4a1917cfc68ca012fd8484dd04e785a496516307769f41001d6488b0461fc020a3a4115283ebe6d8b059f2b8d4b82ff309d7e24eb1f19fe
SSDEEP

24576:cPkGgW8ugdGJYDLoL/vddOUmB5I4LjbrMChWVeTsAe+ZWWj80pYWoTIbjpCeT:/wxH1ah4UTtVZWWj8MTbjpl

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4772	X2A.exe
4772	X2A.exe

C:\Users\Admin\AppData\Local\Temp\x2\X2A.exe
"C:\Users\Admin\AppData\Local\Temp\x2\X2A.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4772

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4772-0-0x0000000060900000-0x0000000060992000-memory.dmp

Filesize
584KB

Download
memory/4772-1-0x0000000062E80000-0x0000000062EA2000-memory.dmp

Filesize
136KB

Download