Analysis
- max time kernel
6s - max time network
11s - platform
windows10-2004_x64 - resource
win10v2004-en-20220113 - submitted
05/02/2022, 16:39
Static task
static1
Behavioral task
behavioral1
Sample
3c8f16f32a6bf75400d5b33e92ad9520002a2bcc1a084d14367ef80e5fb0bbb8.exe
Resource
win7-en-20211208
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
3c8f16f32a6bf75400d5b33e92ad9520002a2bcc1a084d14367ef80e5fb0bbb8.exe
Resource
win10v2004-en-20220113
0 signatures
0 seconds
General
- Target 3c8f16f32a6bf75400d5b33e92ad9520002a2bcc1a084d14367ef80e5fb0bbb8.exe
- Size 109KB
- Sample220205-t6b9asdfbk
- SHA256 3c8f16f32a6bf75400d5b33e92ad9520002a2bcc1a084d14367ef80e5fb0bbb8
- MD5 769c9d50343ea78e62560c01d0746135
- SHA1 6010e1b5799cf01f742c369c5964ec38e124a05b
- SHA512 52c9073105ba56b565daa7a28fa01b7422c3b084bb754d00ab2e4af703b88d824296d93399c1f2f10193988f05554a793d3f3e30951fe3af0bd4bba697efa563
- MD5 SHA1 SHA512
Score
10/10
Malware Config
Signatures
- 404 Keylogger
Information stealer and keylogger first seen in 2019.
- 404 Keylogger Main Executable 1 IoCs
resource yara_rule behavioral2/memory/3568-130-0x0000000000460000-0x0000000000482000-memory.dmp family_404keylogger - Suspicious behavior: RenamesItself 1 IoCs
pid Process 3568 3c8f16f32a6bf75400d5b33e92ad9520002a2bcc1a084d14367ef80e5fb0bbb8.exe