3c72f2851f20fee1e57a73226a2d4a54d88f55fbcaa817bac22eaf01cb79c8de | Triage

Analysis

max time kernel
95s
max time network
96s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
13/07/2024, 08:55

Sharing

Report Analysis Logs

General

Target

Uninstaller.exe
Size

28KB
MD5

904b62bb34ba8d13925136f8329478b2
SHA1

680dc77ca6ed01bd737baa7a204520fdb248bf95
SHA256

4d9fdc0327bcf498179b90ae8c83a89282af8f358fffa0abbc1d30fa68f54232
SHA512

01bb7691361e5a2afc319f7a5e79a300a61baa986e7f26dfbe8adac7ca08df8dce2be223a5094c1d8a0bf530451d7ad90b72f543aeeb661ecb108cd7edf9e024
SSDEEP

192:T6wyvtVjtbDdJeWAX3JYwfTqbDK0mPOcNKOQpIVEsRcBXnbW6OND3WyB8:T6wy5bgfTqT+TDQXnbRSD3WyG

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4944	Uninstaller.exe
4944	Uninstaller.exe
4944	Uninstaller.exe
4944	Uninstaller.exe
4944	Uninstaller.exe
4944	Uninstaller.exe
4944	Uninstaller.exe
4944	Uninstaller.exe
4944	Uninstaller.exe
4944	Uninstaller.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4944	Uninstaller.exe

C:\Users\Admin\AppData\Local\Temp\Uninstaller.exe
"C:\Users\Admin\AppData\Local\Temp\Uninstaller.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4944

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads