Analysis
-
max time kernel
119s -
max time network
134s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
19/09/2022, 13:18
Static task
static1
Behavioral task
behavioral1
Sample
863ec0b0ba30f4a24202079fd74338848db6bfcf6ecc72132ceb196977e1df17.exe
Resource
win7-20220812-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
863ec0b0ba30f4a24202079fd74338848db6bfcf6ecc72132ceb196977e1df17.exe
Resource
win10v2004-20220812-en
2 signatures
150 seconds
General
-
Target
863ec0b0ba30f4a24202079fd74338848db6bfcf6ecc72132ceb196977e1df17.exe
-
Size
40KB
-
MD5
89f1fce4858afb06a25eb870dab34095
-
SHA1
1e184c253602b2d3938272e41e5bdc4930ab71fe
-
SHA256
863ec0b0ba30f4a24202079fd74338848db6bfcf6ecc72132ceb196977e1df17
-
SHA512
aa9515c887f8908824cb0e45dc905cf9faca1c02e120cdc11529506fa27b0d59023fb7679686f7e42611d20e4bde2235815e3d255508d7793488edc3d4b6a046
-
SSDEEP
768:DwwInjFjA3eQ60zz6FEYtytH153x/l7McSQpTW:D+jQx/PRS
Score
4/10
Malware Config
Signatures
-
Drops file in Windows directory 1 IoCs
description ioc Process File opened for modification C:\Windows\irc.txt 863ec0b0ba30f4a24202079fd74338848db6bfcf6ecc72132ceb196977e1df17.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2288 863ec0b0ba30f4a24202079fd74338848db6bfcf6ecc72132ceb196977e1df17.exe 2288 863ec0b0ba30f4a24202079fd74338848db6bfcf6ecc72132ceb196977e1df17.exe 2288 863ec0b0ba30f4a24202079fd74338848db6bfcf6ecc72132ceb196977e1df17.exe