Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
-
submitted
24-05-2024 04:54
General
-
Target
HShield/HSUpdate.exe
-
Size
150KB
-
MD5
061ac0ac3eec7b767c2d353ada7aad4b
-
SHA1
951f81e84581cacab2a953036ca8a0f3db15361a
-
SHA256
daf95bde2293271f59df320e5d934bd47e0e5b14da1d47536ef25596c9db1393
-
SHA512
96b4136dcf0a566561f2908ddd0870f5245a43ea2bbf750f81785a67c278ee2af7dfbe63c021350f9b5eda47caaf50a9b94acc780d221172b994198147e1610d
-
SSDEEP
3072:Q+V+eO276pVT86NMxWWJLhXTszFCpJI+lKMbc0Bagee/oAQ:vV+eO22Px2xWWnDssElUtQ
Score
1/10
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\HShield\HSUpdate.exe"C:\Users\Admin\AppData\Local\Temp\HShield\HSUpdate.exe"1⤵
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
479KB
MD5b21db4568754a3c53256769ca6e8fa45
SHA168872e618ae61a9267dcca7d8728d7346c67018e
SHA25687d25bc5937758185fcf73af2ea9b3e85bd9030da50938063007ad1cbee5ff32
SHA512327bc10b7396370e32cdc9a0b8b1ff8ffac39bb13811e17fbaeac37cdbd638d932a225b305a24650f31c1ef9bbad3acb521c9b8c8f173df3eb9a3f34f215183d
-
Filesize
180KB
-
Filesize
140KB
-
Filesize
152KB
-
Filesize
792KB
-
Filesize
84KB