Analysis
-
max time kernel
83s -
max time network
45s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
02/10/2022, 21:02
Static task
static1
Behavioral task
behavioral1
Sample
6f3061cbf9865460b0da646f59f5334028f0b3e8f92e0f4649bea9ce486225fb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6f3061cbf9865460b0da646f59f5334028f0b3e8f92e0f4649bea9ce486225fb.exe
Resource
win10v2004-20220901-en
General
-
Target
6f3061cbf9865460b0da646f59f5334028f0b3e8f92e0f4649bea9ce486225fb.exe
-
Size
666KB
-
MD5
71e23fafa70f8ffdf3671ac3d4e30520
-
SHA1
47e2a414e8311a2ed7abb7e6421d5b5f1b694615
-
SHA256
6f3061cbf9865460b0da646f59f5334028f0b3e8f92e0f4649bea9ce486225fb
-
SHA512
6cd190aa411cc35ba1db3b2ad546ac4ebd60662702d031254eb8ece522bf2caa12a8ed3b8889168035589a4a14ab20f20c31086d2756b2082490e782d22c919b
-
SSDEEP
12288:yibe5gwS9qz6lPIf1GhT2kdK+Gkm/QZ46MOQfd:bbe5gwS9qzyPIf1GhTzdK+GFxV
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 1976 6f3061cbf9865460b0da646f59f5334028f0b3e8f92e0f4649bea9ce486225fb.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1976 6f3061cbf9865460b0da646f59f5334028f0b3e8f92e0f4649bea9ce486225fb.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\6f3061cbf9865460b0da646f59f5334028f0b3e8f92e0f4649bea9ce486225fb.exe"C:\Users\Admin\AppData\Local\Temp\6f3061cbf9865460b0da646f59f5334028f0b3e8f92e0f4649bea9ce486225fb.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
PID:1976