Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-05-2024 10:47

General

  • Target

    xlbbqmrj/RCX12A.exe

  • Size

    432KB

  • MD5

    0f675c9987b960b4506c9427cbd33a14

  • SHA1

    7431596ecf2fdde02334c9d203023e21b6d07699

  • SHA256

    56d35016d0b60b899973e8ef685890b55315ec0be0172905bd4d51550ddd40a8

  • SHA512

    1bc8ef66e2c584793acc47fab429fc54e10bfac27ccb35f893c62e713d38f031cd8a485f88b8d9befa3c4e55f4dddaabdd79b99b387bbb7af1e98ba4bc506d8b

  • SSDEEP

    12288:gNsriw+RaqO+2t1AVfxDEYFjx3vv+G/DXyCUzU:Jpq/2uflEYFjx3vvHj4U

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\xlbbqmrj\RCX12A.exe
    "C:\Users\Admin\AppData\Local\Temp\xlbbqmrj\RCX12A.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3668

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3668-0-0x0000000000400000-0x000000000046F000-memory.dmp

    Filesize

    444KB

  • memory/3668-1-0x0000000002270000-0x000000000228A000-memory.dmp

    Filesize

    104KB

  • memory/3668-5-0x00000000022B0000-0x0000000002301000-memory.dmp

    Filesize

    324KB

  • memory/3668-4-0x00000000022B0000-0x0000000002301000-memory.dmp

    Filesize

    324KB

  • memory/3668-8-0x00000000022B0000-0x0000000002301000-memory.dmp

    Filesize

    324KB

  • memory/3668-46-0x00000000022B0000-0x0000000002301000-memory.dmp

    Filesize

    324KB

  • memory/3668-52-0x0000000002310000-0x0000000002311000-memory.dmp

    Filesize

    4KB

  • memory/3668-51-0x00000000022B0000-0x0000000002301000-memory.dmp

    Filesize

    324KB

  • memory/3668-49-0x0000000002660000-0x00000000026A4000-memory.dmp

    Filesize

    272KB

  • memory/3668-53-0x0000000002860000-0x00000000028EA000-memory.dmp

    Filesize

    552KB

  • memory/3668-42-0x00000000022B0000-0x0000000002301000-memory.dmp

    Filesize

    324KB

  • memory/3668-40-0x00000000022B0000-0x0000000002301000-memory.dmp

    Filesize

    324KB

  • memory/3668-38-0x00000000022B0000-0x0000000002301000-memory.dmp

    Filesize

    324KB

  • memory/3668-35-0x00000000022B0000-0x0000000002301000-memory.dmp

    Filesize

    324KB

  • memory/3668-32-0x00000000022B0000-0x0000000002301000-memory.dmp

    Filesize

    324KB

  • memory/3668-30-0x00000000022B0000-0x0000000002301000-memory.dmp

    Filesize

    324KB

  • memory/3668-57-0x00000000029F0000-0x0000000002A50000-memory.dmp

    Filesize

    384KB

  • memory/3668-28-0x00000000022B0000-0x0000000002301000-memory.dmp

    Filesize

    324KB

  • memory/3668-26-0x00000000022B0000-0x0000000002301000-memory.dmp

    Filesize

    324KB

  • memory/3668-24-0x00000000022B0000-0x0000000002301000-memory.dmp

    Filesize

    324KB

  • memory/3668-22-0x00000000022B0000-0x0000000002301000-memory.dmp

    Filesize

    324KB

  • memory/3668-20-0x00000000022B0000-0x0000000002301000-memory.dmp

    Filesize

    324KB

  • memory/3668-18-0x00000000022B0000-0x0000000002301000-memory.dmp

    Filesize

    324KB

  • memory/3668-14-0x00000000022B0000-0x0000000002301000-memory.dmp

    Filesize

    324KB

  • memory/3668-12-0x00000000022B0000-0x0000000002301000-memory.dmp

    Filesize

    324KB

  • memory/3668-10-0x00000000022B0000-0x0000000002301000-memory.dmp

    Filesize

    324KB

  • memory/3668-48-0x00000000022B0000-0x0000000002301000-memory.dmp

    Filesize

    324KB

  • memory/3668-44-0x00000000022B0000-0x0000000002301000-memory.dmp

    Filesize

    324KB

  • memory/3668-3-0x00000000022B0000-0x0000000002301000-memory.dmp

    Filesize

    324KB

  • memory/3668-36-0x00000000022B0000-0x0000000002301000-memory.dmp

    Filesize

    324KB

  • memory/3668-16-0x00000000022B0000-0x0000000002301000-memory.dmp

    Filesize

    324KB

  • memory/3668-61-0x0000000000400000-0x000000000046F000-memory.dmp

    Filesize

    444KB

  • memory/3668-62-0x00000000022B0000-0x0000000002301000-memory.dmp

    Filesize

    324KB