75157852354ae856c5d818602e31347e32b35e71203c7639eb157db327857f4a | Triage

Analysis

max time kernel
104s
max time network
131s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
21-05-2024 15:57

Sharing

Report Analysis Logs

General

Target

Frankie's FunClub.exe
Size

66.4MB
MD5

99fe48bc0bf794c4210b8e31f72be785
SHA1

b700d8cf787c1d0f92b55d22428a87462cb5f345
SHA256

10642268f3d0f8e2ba4734a769d794d3d167c56c467a36861611154cf7bbebdd
SHA512

9dfc2c90e81a49c7b6f803ea81bbc339ce55c64b1b9722e9866fe9a2a8fdf6876ef71f15681562985f28141e29c1060976feb1be82bd8ea0d0fda712134cf5c1
SSDEEP

393216:teb7kYcaTNSUUFhl//q0byoX8DUIxmodqxuI6t/t7D73:teb7kYcaBdUFXqroXyQ2/t7

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

Frankie's FunClub.exe

pid process

2832 Frankie's FunClub.exe

C:\Users\Admin\AppData\Local\Temp\Frankie's FunClub.exe
"C:\Users\Admin\AppData\Local\Temp\Frankie's FunClub.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2832

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4144

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2832-1-0x00007FF68BAD0000-0x00007FF68FEF5000-memory.dmp

Filesize
68.1MB

Download