Analysis
-
max time kernel
44s -
max time network
48s -
platform
windows7_x64 -
resource
win7-20220414-en -
submitted
10-06-2022 12:31
Static task
static1
Behavioral task
behavioral1
Sample
1e9fc7f32bd5522dd0222932eb9f1d8bd0a2e132c7b46cfcc622ad97831e6128.exe
Resource
win7-20220414-en
windows7_x64
0 signatures
0 seconds
General
-
Target
1e9fc7f32bd5522dd0222932eb9f1d8bd0a2e132c7b46cfcc622ad97831e6128.exe
-
Size
352KB
-
MD5
5a7a90ceb6e7137c753d8de226fc7947
-
SHA1
204a603c409e559b65c35208200a169a232da94c
-
SHA256
1e9fc7f32bd5522dd0222932eb9f1d8bd0a2e132c7b46cfcc622ad97831e6128
-
SHA512
a1f8dcf279b0f0b74d4e7890f118bbf27d0c20da75ebb670c0ee41dae6e16eae86c05fea5a6b51756b93360b8965545c3bde76b2beefeebed44a19fa42af79ed
Malware Config
Signatures
-
Detect WinDealer information stealer 1 IoCs
Processes:
resource yara_rule behavioral1/memory/1992-55-0x0000000010000000-0x000000001003C000-memory.dmp family_windealer -
Suspicious use of SetWindowsHookEx 2 IoCs
Processes:
1e9fc7f32bd5522dd0222932eb9f1d8bd0a2e132c7b46cfcc622ad97831e6128.exepid Process 1992 1e9fc7f32bd5522dd0222932eb9f1d8bd0a2e132c7b46cfcc622ad97831e6128.exe 1992 1e9fc7f32bd5522dd0222932eb9f1d8bd0a2e132c7b46cfcc622ad97831e6128.exe