9ad74a0f18ce39a0d92a9dabc6ef7ebb2aebf1471ed868f14e183faf0123eb87 | Triage

Analysis

max time kernel
93s
max time network
94s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
09/06/2024, 00:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

WinMTR.exe
Size

2.3MB
MD5

7174ccf02161dab6e424e2de83807deb
SHA1

dbaef2cbdd50d56e2d6bbd63991d22391526894b
SHA256

9ad74a0f18ce39a0d92a9dabc6ef7ebb2aebf1471ed868f14e183faf0123eb87
SHA512

3feb78fc4b60dc089c7c84b31ab3d676458c82d91b3a1c12db469dbb6d56b13a62cb3cfa3e5bd94490a89c659d6d17caff8e1a5060ebb49a81529aeda15e0f5f
SSDEEP

49152:jgUtLamQ9h/eWg7dfN/RODru+USamit26nFd2b3g2:kua9c17dpt26n2b3g

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4876	WinMTR.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4876	WinMTR.exe
4876	WinMTR.exe

C:\Users\Admin\AppData\Local\Temp\WinMTR.exe
"C:\Users\Admin\AppData\Local\Temp\WinMTR.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:4876

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads