Analysis
-
max time kernel
152s -
max time network
46s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
19/09/2022, 06:51
Static task
static1
Behavioral task
behavioral1
Sample
94290e5d7ddf945ab7d7d000cdb680f2f83cb5e5b0ecf95bf0081c08cb0bd382.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
94290e5d7ddf945ab7d7d000cdb680f2f83cb5e5b0ecf95bf0081c08cb0bd382.exe
Resource
win10v2004-20220901-en
General
-
Target
94290e5d7ddf945ab7d7d000cdb680f2f83cb5e5b0ecf95bf0081c08cb0bd382.exe
-
Size
84KB
-
MD5
1899bd8a0a2f31e94d389b18a741955c
-
SHA1
3820933a3bb1e3578e50b0994d718b1ce9fdf426
-
SHA256
94290e5d7ddf945ab7d7d000cdb680f2f83cb5e5b0ecf95bf0081c08cb0bd382
-
SHA512
1f08734d828dc35ec56a8c951096035fbfd2e8c418e38981c4232f3bbc017df0d96c906d903c6df4972d8f6f16a723809ac7d98d2eb2d16150a8a8f4c2ef26d1
-
SSDEEP
768:AJLAx2TpfWswEnz1x0rpJH1mE9VK7oKpEMgc1kMmONMzt265Ei9mvrz03m5wjYUf:p+fZwEn30TH1wrA9krzXCH
Malware Config
Signatures
-
Drops file in Windows directory 2 IoCs
description ioc Process File created C:\Windows\wins.txt 94290e5d7ddf945ab7d7d000cdb680f2f83cb5e5b0ecf95bf0081c08cb0bd382.exe File opened for modification C:\Windows\wins.txt 94290e5d7ddf945ab7d7d000cdb680f2f83cb5e5b0ecf95bf0081c08cb0bd382.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1660 94290e5d7ddf945ab7d7d000cdb680f2f83cb5e5b0ecf95bf0081c08cb0bd382.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1660 94290e5d7ddf945ab7d7d000cdb680f2f83cb5e5b0ecf95bf0081c08cb0bd382.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\94290e5d7ddf945ab7d7d000cdb680f2f83cb5e5b0ecf95bf0081c08cb0bd382.exe"C:\Users\Admin\AppData\Local\Temp\94290e5d7ddf945ab7d7d000cdb680f2f83cb5e5b0ecf95bf0081c08cb0bd382.exe"1⤵
- Drops file in Windows directory
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1660