Analysis
-
max time kernel
35s -
max time network
42s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
03/10/2022, 07:12
Behavioral task
behavioral1
Sample
5a3e75470ce85e32c6497dc6bf29e47d09680813c495673dca965c91b231c4a8.exe
Resource
win7-20220812-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
5a3e75470ce85e32c6497dc6bf29e47d09680813c495673dca965c91b231c4a8.exe
Resource
win10v2004-20220901-en
2 signatures
150 seconds
General
-
Target
5a3e75470ce85e32c6497dc6bf29e47d09680813c495673dca965c91b231c4a8.exe
-
Size
32KB
-
MD5
6861e0674ff27e92814a298208bb196c
-
SHA1
d8df0baa6d3f46f985a99f7da3178b09065c4026
-
SHA256
5a3e75470ce85e32c6497dc6bf29e47d09680813c495673dca965c91b231c4a8
-
SHA512
c5e7ad02a2211af643e4dede0da8e5ee25a145717c02f6bbe97bd1fd8c87a39c1d2b392980901f01326a80bed3878c8512b39b4cb42cb8f6217acfae43a0f312
-
SSDEEP
384:wD3ENcyytylmUskMQrm9ug7eQkgLKS4TLJHbq1a+Oc20ezMoMM7:6FtqsErm9xi9gpmLJHOaMXo17
Score
8/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1492-54-0x0000000000400000-0x000000000041A000-memory.dmp upx behavioral1/memory/1492-57-0x0000000000400000-0x000000000041A000-memory.dmp upx -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1492 5a3e75470ce85e32c6497dc6bf29e47d09680813c495673dca965c91b231c4a8.exe