8bb79293e59e4fbd16f770848d90c6958c4f37b945e2c18d3739bbe7520f33a3 | Triage

Analysis

max time kernel
118s
max time network
136s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
22-05-2024 23:08

Sharing

Report Analysis Logs

General

Target

mari0_1.6.exe
Size

6.7MB
MD5

b5c761cfc3a3f354a59a1a9d2190135d
SHA1

416f32e1c9fe70cd4c62475aa2168304d04cac67
SHA256

ed1706f0f6e6cf4e32a86be61acf0d334d7c8abe8825e0075003449101164c01
SHA512

ed21a0fa1fc8e4f1bd84ece8bcbd84cc9ebdf97af519454f27eafcd22f1c147db1e1f8f95a01e1c0cb9fab344ce99da68b3b27635b184ed68227d362793be327
SSDEEP

98304:XaTJmMOxiOSenYBFoEKHhqW6H342OQ52hbsT69QVyIGguj:KVFwTShFmBtgoCprUXj

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

mari0_1.6.exe

pid process

2188 mari0_1.6.exe
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

mari0_1.6.exe

pid process

2188 mari0_1.6.exe

C:\Users\Admin\AppData\Local\Temp\mari0_1.6.exe
"C:\Users\Admin\AppData\Local\Temp\mari0_1.6.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2188

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads