c6207599e0d816df9962ee08c0e1032fd749edb8791c1f895bf57675671c1421 | Triage

Analysis

max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
03-07-2024 06:50

Sharing

Report Analysis Logs

General

Target

CAD2EXE V10.3/CAD Protector V10.3.exe
Size

9.0MB
MD5

ec914b3dd9fb95d359e8aac442516f5a
SHA1

2ffcfa29fa1dbcb66790a96f3867c12b30073fcc
SHA256

a624364e733313558ec75f13239ffc49cab828f118b5f7ff9cb4a6485d901725
SHA512

98ec7a9f514f74811c74726636dc0b2a22ce551fb3b3947563c97fbb08ede53ce5859c629ce82f6e52bbd9a7ea630418dea20e60f9301e8d8588c976f241379d
SSDEEP

196608:bFKwppxci2FppIMyM06fC2s6bGls7tCWIF:bFKwppQ3IMyMtC21hZCWIF

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4212	CAD Protector V10.3.exe

C:\Users\Admin\AppData\Local\Temp\CAD2EXE V10.3\CAD Protector V10.3.exe
"C:\Users\Admin\AppData\Local\Temp\CAD2EXE V10.3\CAD Protector V10.3.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4212

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4212-0-0x0000000002A50000-0x0000000002A51000-memory.dmp

Filesize
4KB

Download
memory/4212-1-0x0000000000400000-0x0000000000D01000-memory.dmp

Filesize
9.0MB

Download
memory/4212-3-0x0000000002A50000-0x0000000002A51000-memory.dmp

Filesize
4KB

Download