9384da648c70c68e525fa5b2391c23ad8bab96647a6b41a61b47219ae66ca2e3 | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20241023-en
resource tags

arch:x64arch:x86image:win7-20241023-enlocale:en-usos:windows7-x64system
submitted
21/12/2024, 14:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

$0/PotLV64.exe
Size

647KB
MD5

a66d9e8f8525315924710f84af19e5b7
SHA1

00386a1d980032f0359e4dd42176a5c530638b7a
SHA256

606e8fa7eba8b9ded6a333093b033ac8842d48ed06d4b2bc491ad49e2f8e4299
SHA512

af3fbf3ca735bc9a6c984f98dcc1f068219ed840cb4a17e164c6f489484dc3690083e18037766292f1a4dbe5b2e082349ff64f32be846fcc05640dd11dd9824a
SSDEEP

12288:jr8jq1NzkoiabmRG6EUQtWrvt9BRAaCPr:vPFrXUQtWjH/ir

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2940	PotLV64.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2940	PotLV64.exe
2940	PotLV64.exe

C:\Users\Admin\AppData\Local\Temp\$0\PotLV64.exe
"C:\Users\Admin\AppData\Local\Temp\$0\PotLV64.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2940

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads