Analysis

  • max time kernel
    140s
  • max time network
    127s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21-07-2024 14:16

General

  • Target

    usermode.exe

  • Size

    222KB

  • MD5

    00299fa613e328cbcb50937c70fe2b2d

  • SHA1

    6c388164eb0eabbebedeb13d47b5287225c6bedc

  • SHA256

    becc57083a613d8bb2234194f98d0bc51192528ac28c48d49f2fb29d7ca2b4d0

  • SHA512

    0fdf504fb2e9debaf5553393e9f7f0349f528fbfaed895bfadfc8abeb2400f56e227b382ee75847a3a42f808b063ee91c1f7f4f16c335726a2e8b0d21a98a655

  • SSDEEP

    6144:27cgpW6aojE0gbzNRmHKkOzojHGOwf0AGn0:27VdR8hKh6xxGn

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\usermode.exe
    "C:\Users\Admin\AppData\Local\Temp\usermode.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: GetForegroundWindowSpam
    PID:2324

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads