Analysis

  • max time kernel
    31s
  • max time network
    38s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04/10/2024, 13:39

Errors

Reason
Machine shutdown

General

  • Target

    e$EXEFILE.exe

  • Size

    552KB

  • MD5

    b55497b1bfc7b78ad6587b15955a632f

  • SHA1

    f22a93d26b8d2f8fe03cf8100197c5c07f0b59a4

  • SHA256

    a5432b77f82f13fbe4492ac82df7c2d5c191de87a6faaee86799fa94b39d9747

  • SHA512

    2cf318c92424cb00eb65894b775fa85aa3a7734cfd22bcbf7455c7d69da831f7e3e322c4a0e61e4b60e60fc47817027edf44af5d9cad6d3357dd4a95aaf0c333

  • SSDEEP

    6144:Dwrz5GbjBzFauZEk48Ks02VqEVT6pFbcxf8FiR8idWp27jlWPKy0rsMIVVBvg:DwPYrayE72nVTGFiRHM27jK7ocDvg

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e$EXEFILE.exe
    "C:\Users\Admin\AppData\Local\Temp\e$EXEFILE.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4228

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/4228-0-0x00007FFABC685000-0x00007FFABC686000-memory.dmp

          Filesize

          4KB

        • memory/4228-1-0x00007FFABC3D0000-0x00007FFABCD71000-memory.dmp

          Filesize

          9.6MB

        • memory/4228-2-0x00007FFABC3D0000-0x00007FFABCD71000-memory.dmp

          Filesize

          9.6MB

        • memory/4228-3-0x000000001BF80000-0x000000001C44E000-memory.dmp

          Filesize

          4.8MB

        • memory/4228-4-0x000000001C4F0000-0x000000001C58C000-memory.dmp

          Filesize

          624KB

        • memory/4228-5-0x0000000001110000-0x0000000001118000-memory.dmp

          Filesize

          32KB

        • memory/4228-6-0x00007FFABC3D0000-0x00007FFABCD71000-memory.dmp

          Filesize

          9.6MB

        • memory/4228-7-0x00007FFABC3D0000-0x00007FFABCD71000-memory.dmp

          Filesize

          9.6MB

        • memory/4228-8-0x00007FFABC3D0000-0x00007FFABCD71000-memory.dmp

          Filesize

          9.6MB

        • memory/4228-9-0x00007FFABC3D0000-0x00007FFABCD71000-memory.dmp

          Filesize

          9.6MB

        • memory/4228-10-0x00007FFABC685000-0x00007FFABC686000-memory.dmp

          Filesize

          4KB

        • memory/4228-11-0x00007FFABC3D0000-0x00007FFABCD71000-memory.dmp

          Filesize

          9.6MB

        • memory/4228-14-0x00007FFABC3D0000-0x00007FFABCD71000-memory.dmp

          Filesize

          9.6MB