Analysis
-
max time kernel
36s -
max time network
42s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
01/10/2022, 19:13
Static task
static1
Behavioral task
behavioral1
Sample
a87ade15fdadcdf157bbaecca6658beea4964cdf2359789d12fb5c2d39b7c247.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a87ade15fdadcdf157bbaecca6658beea4964cdf2359789d12fb5c2d39b7c247.exe
Resource
win10v2004-20220812-en
General
-
Target
a87ade15fdadcdf157bbaecca6658beea4964cdf2359789d12fb5c2d39b7c247.exe
-
Size
132KB
-
MD5
569884b24b3a48a7283a36027dbbd0bf
-
SHA1
24514373a752bd755d3e9d185986221b5cfd6859
-
SHA256
a87ade15fdadcdf157bbaecca6658beea4964cdf2359789d12fb5c2d39b7c247
-
SHA512
af057bde22eb4db6b22ba2f970a99f4a4bdc1aa85a3259be074e7ef5aaedaa4bcc4630839babb385d48d30d567ec9370fdcb8c823e0f0470d574248e970b5e6e
-
SSDEEP
1536:DnxxQWRT5e6K2DxdzKCJTAS5Q/+4xvgtYQIo9tXoGzX/nnRcymY:DnxSH2Dxdz38R/IOQIoUcnRcymY
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 1976 a87ade15fdadcdf157bbaecca6658beea4964cdf2359789d12fb5c2d39b7c247.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1976 a87ade15fdadcdf157bbaecca6658beea4964cdf2359789d12fb5c2d39b7c247.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\a87ade15fdadcdf157bbaecca6658beea4964cdf2359789d12fb5c2d39b7c247.exe"C:\Users\Admin\AppData\Local\Temp\a87ade15fdadcdf157bbaecca6658beea4964cdf2359789d12fb5c2d39b7c247.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:1976