71e9d4c711a188b0bc798b078eb8f052b11d479c9f4e4f1d746dccfefd4de984 | Triage

Analysis

max time kernel
448s
max time network
1172s
platform
windows10-2004_x64
resource
win10v2004-20240508-es
resource tags

arch:x64arch:x86image:win10v2004-20240508-eslocale:es-esos:windows10-2004-x64systemwindows
submitted
04-06-2024 01:11

Sharing

Report Analysis Logs

General

Target

F0nts/Nita/Winzip.exe
Size

3.2MB
MD5

b66dec691784f00061bc43e62030c343
SHA1

779d947d41efafc2995878e56e213411de8fb4cf
SHA256

26b40c79356453c60498772423f99384a3d24dd2d0662d215506768cb9c58370
SHA512

6a89bd581baf372f07e76a3378e6f6eb29cac2e4981a7f0affb4101153407cadfce9f1b6b28d5a003f7d4039577029b2ec6ebcfd58e55288e056614fb03f8ba3
SSDEEP

98304:lJXOBfK92HbAw0CNB3kJElzNsy8vGUvfCo3ABH43:lJ192HbAXCvDlzNsy8vGUyo3AB8

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

Winzip.exe

pid process

4688 Winzip.exe
4688 Winzip.exe

C:\Users\Admin\AppData\Local\Temp\F0nts\Nita\Winzip.exe
"C:\Users\Admin\AppData\Local\Temp\F0nts\Nita\Winzip.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4688

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...