bb3e659c7667027142a17dc6ef5604c54ed8146a1ec2dde6138133f629102779 | Triage

Analysis

max time kernel
140s
max time network
111s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
27/06/2024, 11:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

Recorder.exe
Size

893KB
MD5

95b3fa7623ecd5b9e23b8fee1879c5ad
SHA1

c3214d04887824e3d6ff2a14c01d1a06fe37e027
SHA256

5dd932924310fcc2ea6ce3c45138df6627402b2da72754f00b72f7a4bf771ed5
SHA512

3dfc901a41d48476f268d03f0ec600408e729362315487c6fd21e426ebcf1e23ae0879e95a396428c01d1e9646503c4abbba3ba425294f0a20e3fb85ec896b9d
SSDEEP

12288:8524jkTxIiTuYhfsoLtouLI/GFeREQz1r0W1UK/nRniFjnTz:8524jkTKEusfsoLzKpr0W1L9cfz

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
928	Recorder.exe
928	Recorder.exe
928	Recorder.exe

C:\Users\Admin\AppData\Local\Temp\Recorder.exe
"C:\Users\Admin\AppData\Local\Temp\Recorder.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:928

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/928-0-0x0000000000AA0000-0x0000000000AD8000-memory.dmp

Filesize
224KB

Download