640fdedceb0f2a4e0079001a9128eabb20fd801e0c805a6320f6116810c5bf06 | Triage

Resubmissions

28/06/2024, 12:31

240628-pqjwzszbna 7

Analysis

max time kernel
101s
max time network
19s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
28/06/2024, 12:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

keymaker-2.1.2.exe
Size

69KB
MD5

e2b75c862bb136d9a9168929a6c9a00a
SHA1

cf200b6759a3429159fa6aaaff239042cadc8bd7
SHA256

e1d78799d1cd43dc5a9c3c7306439b04d6c5ac99fa9adc3fd1fd5032676e1077
SHA512

d2f1abd62c75ee134529eba1c1b620a5730595ee42de852edcadb3194b7857f91e5a14bd45c4491da51dea0386a0bdc269124dad089257fa7ed6abdbbc72a0c9
SSDEEP

1536:9/IKEJRjZa7NdUYjolwbxrtoE2sTe07UI:SKEJRdkTNjKI6fg7

Score

1^/10

Malware Config

Signatures

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2392	keymaker-2.1.2.exe

C:\Users\Admin\AppData\Local\Temp\keymaker-2.1.2.exe
"C:\Users\Admin\AppData\Local\Temp\keymaker-2.1.2.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:2392

C:\Windows\explorer.exe
"C:\Windows\explorer.exe"
1⤵
PID:3024

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2392-0-0x0000000000400000-0x0000000000419710-memory.dmp

Filesize
101KB

Download
memory/2392-1-0x0000000000400000-0x0000000000401000-memory.dmp

Filesize
4KB

Download
memory/2392-2-0x0000000000400000-0x0000000000419710-memory.dmp

Filesize
101KB

Download
memory/2392-5-0x0000000000400000-0x0000000000401000-memory.dmp

Filesize
4KB

Download