Analysis
- max time kernel
12s - max time network
112s - platform
windows10_x64 - resource
win10v20210410 - submitted
12/07/2021, 10:13
Static task
static1
Behavioral task
behavioral1
Sample
3fb7ee49dcc8efa9cb3eb8ed2b5a36457b19a5ec0e20f715c90a0823c3f2a53e.exe
Resource
win7v20210408
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
3fb7ee49dcc8efa9cb3eb8ed2b5a36457b19a5ec0e20f715c90a0823c3f2a53e.exe
Resource
win10v20210410
0 signatures
0 seconds
General
- Target 3fb7ee49dcc8efa9cb3eb8ed2b5a36457b19a5ec0e20f715c90a0823c3f2a53e.exe
- Size 822KB
- Sample210712-637dmxddf6
- SHA256 3fb7ee49dcc8efa9cb3eb8ed2b5a36457b19a5ec0e20f715c90a0823c3f2a53e
- MD5 2d32aee6dd5235ef321b9d71894ece07
- SHA1 87278ee3a2707dfa38cd1c74741e67a75a668156
- SHA512 852c3d75783dfe311d1f95032ccdc5b416e0801908dbf2bf49d203a1b7f32f125068b71830c4f25551a8346f2294fc5d0821177c3efdefaa4f495de50bf14ae3
- MD5 SHA1 SHA512
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3916 3fb7ee49dcc8efa9cb3eb8ed2b5a36457b19a5ec0e20f715c90a0823c3f2a53e.exe 3916 3fb7ee49dcc8efa9cb3eb8ed2b5a36457b19a5ec0e20f715c90a0823c3f2a53e.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3916 3fb7ee49dcc8efa9cb3eb8ed2b5a36457b19a5ec0e20f715c90a0823c3f2a53e.exe 3916 3fb7ee49dcc8efa9cb3eb8ed2b5a36457b19a5ec0e20f715c90a0823c3f2a53e.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\3fb7ee49dcc8efa9cb3eb8ed2b5a36457b19a5ec0e20f715c90a0823c3f2a53e.exe"C:\Users\Admin\AppData\Local\Temp\3fb7ee49dcc8efa9cb3eb8ed2b5a36457b19a5ec0e20f715c90a0823c3f2a53e.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:3916