Resubmissions

01-07-2024 10:07

240701-l56gravgka 3

Analysis

  • max time kernel
    40s
  • max time network
    50s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-es
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-eslocale:es-esos:windows10-2004-x64systemwindows
  • submitted
    01-07-2024 10:07

General

  • Target

    BAURDedallesGSAZACAKGVLIENDOCngok.exe

  • Size

    125.9MB

  • MD5

    b1be9e34004a3ddd2f6c53eb550004a1

  • SHA1

    e65e471408be8591a4e5619067aa43c5ced49ce1

  • SHA256

    709a6f455761c377c63700fe2407903f716f299ea79625699b3f4ccd7aba7be5

  • SHA512

    e88d8e61badb86ac429dbf8f7ea22878dbd5c9a891964f0ca83d2b3f2c27ec42760b690b4d6a2c0d68fd9f538b0ae6ce8c09313672d81e17f9125c57068ca0ad

  • SSDEEP

    98304:86Pf33eOAkVG2MQLVHVKuv2ME0i6CFc+skcfkDmQaRgaCWAds8wN:8weOAd4V1KM2MmM+YT/Z

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\BAURDedallesGSAZACAKGVLIENDOCngok.exe
    "C:\Users\Admin\AppData\Local\Temp\BAURDedallesGSAZACAKGVLIENDOCngok.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2492

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2492-0-0x00000000002A0000-0x00000000012A0000-memory.dmp

    Filesize

    16.0MB

  • memory/2492-1-0x00000000002A0000-0x00000000012A0000-memory.dmp

    Filesize

    16.0MB

  • memory/2492-2-0x00000000002A0000-0x00000000012A0000-memory.dmp

    Filesize

    16.0MB