Analysis
-
max time kernel
5s -
max time network
46s -
platform
windows7_x64 -
resource
win7-20220414-en -
submitted
17-04-2022 14:39
Static task
static1
Behavioral task
behavioral1
Sample
d971a1036ec99bb5d51fb6ae6556f8e4b606932ba79e47e69e6696e48116d6b1.exe
Resource
win7-20220414-en
windows7_x64
0 signatures
0 seconds
General
-
Target
d971a1036ec99bb5d51fb6ae6556f8e4b606932ba79e47e69e6696e48116d6b1.exe
-
Size
6.6MB
-
MD5
c6d242d56b18c6a490f9f95f0fc8b9ac
-
SHA1
34f33ab16581bac622962829e2b8cd491d8d107d
-
SHA256
d971a1036ec99bb5d51fb6ae6556f8e4b606932ba79e47e69e6696e48116d6b1
-
SHA512
29c4ae0e8b181f3572ea72e793a1832f6a0335f9032e03100476f257bdd7da43d56fbf7a1548a4484eec0c310742442f9cd285c65ada0a7f3b8fd8a040fa1326
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1864-55-0x00000000003E0000-0x00000000003EC000-memory.dmp buer behavioral1/memory/1864-59-0x0000000040000000-0x0000000040009000-memory.dmp buer behavioral1/memory/1864-62-0x0000000000290000-0x0000000000299000-memory.dmp buer -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1864 d971a1036ec99bb5d51fb6ae6556f8e4b606932ba79e47e69e6696e48116d6b1.exe 1864 d971a1036ec99bb5d51fb6ae6556f8e4b606932ba79e47e69e6696e48116d6b1.exe