8b435292b99dcf63420fdef837b67b4317f2670d1b1a8c066c6f1e7e71f42f1a | Triage

Analysis

max time kernel
150s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
10/07/2024, 14:20

Sharing

Report Analysis Logs

General

Target

gwz3-11.exe
Size

16KB
MD5

da8f037081129f8a7f8fb9669db40473
SHA1

bbb5ef3df76851d47889dbd38d1a7e58586224b8
SHA256

23027c3adebf2f1b037138dc858e601bbac5822bbf3ecdbc32a139806c6b783c
SHA512

084071c50dfd3357e3f07b433dd7f92b2e19d764fe42d664fb03d2c527d4eb300edf54362220563ce7f09fc9e93eef3c3d773db933de8ae9d35d554042079e55
SSDEEP

384:zFVaThvt9/fcm2RKJX9FNkXn3fAxfr6+e9Pfqbn1u5:zF4Thv3SyX9FNkXn3YxOha5u

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1180	gwz3-11.exe

C:\Users\Admin\AppData\Local\Temp\gwz3-11.exe
"C:\Users\Admin\AppData\Local\Temp\gwz3-11.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1180

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1180-0-0x0000000000400000-0x000000000040F000-memory.dmp

Filesize
60KB

Download
memory/1180-3-0x0000000000400000-0x000000000040F000-memory.dmp

Filesize
60KB

Download