Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09-05-2024 12:55

General

  • Target

    0464a9dd9fa9ffcfdb8fda4a0b43998815e53e5a827091c5285269fe151e4a98.exe

  • Size

    13.0MB

  • MD5

    d556a0fca26280010d88c20b3ae60ceb

  • SHA1

    f69944617de2dda03d951d9f5f1f710bab873596

  • SHA256

    0464a9dd9fa9ffcfdb8fda4a0b43998815e53e5a827091c5285269fe151e4a98

  • SHA512

    e0caf7f32b8315972cef03250b8bd16270b1f7baab45f4ad6e67e027094d048a29a2d49ff65909021dd51d73a139c79ccffefb7f05c1f6f28057a83ab35ff319

  • SSDEEP

    196608:KnC20D8MFxKhdj9O0AoHWrXoLGI+zNLdmODAH06tWnJ1ebrqN62R73jf:KnA8ywhdRvbWr49hFH06ttbrqNH3D

Score
1/10

Malware Config

Signatures

  • Modifies registry class 3 IoCs
  • Modifies system certificate store 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0464a9dd9fa9ffcfdb8fda4a0b43998815e53e5a827091c5285269fe151e4a98.exe
    "C:\Users\Admin\AppData\Local\Temp\0464a9dd9fa9ffcfdb8fda4a0b43998815e53e5a827091c5285269fe151e4a98.exe"
    1⤵
    • Modifies registry class
    • Modifies system certificate store
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:884

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads