Analysis

  • max time kernel
    149s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12-06-2024 07:52

General

  • Target

    2d7d1ec206767a32a6a5e7720b57276176eb89703d681319d084dccb4c21eab8.exe

  • Size

    1.0MB

  • MD5

    cbe3465dc3ed1b5645f0bb0b1258e4e6

  • SHA1

    59a7660a9c535f7bfb50f458f038d862579e23e0

  • SHA256

    2d7d1ec206767a32a6a5e7720b57276176eb89703d681319d084dccb4c21eab8

  • SHA512

    8d7c25a73c79206de73192c6c1504bdcbb52de3d13a213aa9425ce1336e89d482553a230a2887e129db24a2cb874efa5f4c9c5f98b0225bad0bb88b71aedb308

  • SSDEEP

    24576:nu1CyGMV5SwuZTChrJlK/EuFpMoomTDhkP/eojno9oLLPon:J+brJAc0pJTVkPs9KLPon

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2d7d1ec206767a32a6a5e7720b57276176eb89703d681319d084dccb4c21eab8.exe
    "C:\Users\Admin\AppData\Local\Temp\2d7d1ec206767a32a6a5e7720b57276176eb89703d681319d084dccb4c21eab8.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:684

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\ZohoMeeting\log\Connect.log

    Filesize

    4KB

    MD5

    27a17ad18f38ffad76caf0cf2e4216c9

    SHA1

    7bd9fbed42ed1f7571a73f30a0b0a536e912b47b

    SHA256

    98b0d6bb2ee396e5e651a87b2459219658d764a12103cb5825a0e80c975ae6d5

    SHA512

    1dc379e57e0e032f0f0ec5baca143cff39107c662c142d9d35a701a69eb6d64a1277845e8352d4def3f7e81ef42a4ca64fe81f2b88b91a728f8c66f26fb8b0c6

  • C:\Users\Admin\AppData\Local\ZohoMeeting\log\Connect.log

    Filesize

    1KB

    MD5

    7a56e5b2e5f9e4bfd25223c9bff807b5

    SHA1

    886fa1ebb5b082c0b3847862d1df70d52ba884c3

    SHA256

    65f469c942bf040fd281c2c4769ebb8e7e3fff71a168280e1c1ffa53017bf1f2

    SHA512

    5338bf10a6605a20ad6cfb9a69fdc684ba977bbec74ad8605fb31dc692f7da8b62f5b8e5b9c3e09510cc7dc69def57bdbde2e3e40d74b0f140b8b583f7df139b

  • C:\Users\Admin\AppData\Local\ZohoMeeting\log\Connect.log

    Filesize

    1KB

    MD5

    135ec7f4e49d7980e8e9b1b57fa0e4b4

    SHA1

    38ae32fe64cd3acf68edc76c0cbc0cab175a05cd

    SHA256

    a55b15bcdae6b54d74c86c5631f404f6a06fdad6f6256395629e249c123d375d

    SHA512

    8f659ff31ebe8d4c6780b1ec9b8222da3188e6c0966ecf4c86b7261a43e14b6f95b9385d8a6a4437463c60d31f34bea8a8edb5ce88db7f385290453fbc362f71

  • C:\Users\Admin\AppData\Local\ZohoMeeting\log\Connect.log

    Filesize

    2KB

    MD5

    cf1994ad93172aaadc0a4f0d47561fb3

    SHA1

    1c37c6fbad8c5e7d1eb255b4460273d1146fb568

    SHA256

    5a5f1ec0d354bbce058e0fc92e723cd2e540bca0979868c971256ca47b55a7c9

    SHA512

    ea22896da49f2e8e5031a474d7d1de29fe01f68c2420375ed2f19991f1941027318504bc5c2bc0ed6b869796d016936c3f64b57b6e205cdaa7d87dc9f0041f11

  • C:\Users\Admin\AppData\Local\ZohoMeeting\log\Connect.log

    Filesize

    657B

    MD5

    ba2f14fda33e33318922beb52293a564

    SHA1

    47b6abb72337ef2c74dfb2499e4ecdb5821eadc3

    SHA256

    e8672a53563350ed8bc7337984ade31c1b89b8196b296dfc165bbd8dbacc384a

    SHA512

    b037f6ba93846568d0bc003191fbc97b964f94b4af757c6475e8ba590aa15a58aa13d3f5d7850a17a57eca9db74c1332e2ccf6034b4b141a5720410a51aa8fd1

  • C:\Users\Admin\AppData\Local\ZohoMeeting\log\Connect.log

    Filesize

    2KB

    MD5

    d4b990b12e48f59f601fa9907021fa45

    SHA1

    d4ec98d0de0fc1d52416b7258c1c3971365acd34

    SHA256

    b734098dafd0665fd8f1b5674604b4563f4d26079d850a1a5e1e72f50531736f

    SHA512

    c9f8b28688bb710536d0e56162beca51b3fc846273e5a780c314b7a80ed8ed7daa594547567198cfa28f1c9f62ad86553075c55da986cd3c588572ff096ede2e

  • C:\Users\Admin\AppData\Local\ZohoMeeting\log\Connect.log

    Filesize

    3KB

    MD5

    5bbab70c61aaaaa1e2a048721383d026

    SHA1

    f42e282634e7d097472018f85f46d7d462411559

    SHA256

    7e2837fa7c46b69d3515afe41e46022054b79c7ca5e583b891b05cb7bf1f773a

    SHA512

    d7b770d37e13727fff50aaf617aae126df3eb8a54e37a03e1fde9cafeec831b0747c47f5b82d3e7c09dd2f9195aafebaef0512ddf524a309ed51a5a64a078143