cf894f43d7f3604e9e5ffa253b06c2dd3856681f4a70c1d75e994c58b1018d56 | Triage

Analysis

max time kernel
131s
max time network
135s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
18-05-2024 01:50

Sharing

Report Analysis Logs

General

Target

g12.exe
Size

892KB
MD5

7ac6d29dafd88ae158ba1987c312ae7c
SHA1

fda905af1fea4fd30e35fefaace705376bdb162c
SHA256

cf894f43d7f3604e9e5ffa253b06c2dd3856681f4a70c1d75e994c58b1018d56
SHA512

e0c90129f74e03ee4d906383675fead75e1fd5dcde2b6501a7bacccb3d6173e86e81a388287812cccfb5533876123048d3ec39443fd2ff5094b9f655d1bbeaa7
SSDEEP

12288:+8ov/AoJiq/2Erig84ptXj6Zq/yeYOcUekIANrxSXwfBF0EAf:T+l2kiiptzkeYOcCEXwfBF0X

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

g12.exe

pid process

2892 g12.exe
2892 g12.exe

C:\Users\Admin\AppData\Local\Temp\g12.exe
"C:\Users\Admin\AppData\Local\Temp\g12.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2892

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2892-0-0x0000000002230000-0x0000000002231000-memory.dmp

Filesize
4KB

Download