Analysis
-
max time kernel
88s -
max time network
48s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
03/10/2022, 20:44
Static task
static1
Behavioral task
behavioral1
Sample
6bdb792ec1bb19748a0468db1f3bd80c82c088ed00c3f21a43754a83dd7244b1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6bdb792ec1bb19748a0468db1f3bd80c82c088ed00c3f21a43754a83dd7244b1.exe
Resource
win10v2004-20220812-en
General
-
Target
6bdb792ec1bb19748a0468db1f3bd80c82c088ed00c3f21a43754a83dd7244b1.exe
-
Size
666KB
-
MD5
4277f12f77b531b5aef6803551ea9f50
-
SHA1
f2ef7a91f0b5333c7ce3f1b18de007311318007f
-
SHA256
6bdb792ec1bb19748a0468db1f3bd80c82c088ed00c3f21a43754a83dd7244b1
-
SHA512
66b7ab16ac4c3fbc00eedc2d74bc5dcbebaedfce659b2065d3401936214f9699a4e1626ef8214e24e48e001889a3f902db3ad80b68e3be29a57a5b2db27db863
-
SSDEEP
12288:yibe5gwS9qz6lPIf1GhT2kdK+Gkm/QZ46MOQfj:bbe5gwS9qzyPIf1GhTzdK+GFxL
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 1916 6bdb792ec1bb19748a0468db1f3bd80c82c088ed00c3f21a43754a83dd7244b1.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1916 6bdb792ec1bb19748a0468db1f3bd80c82c088ed00c3f21a43754a83dd7244b1.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\6bdb792ec1bb19748a0468db1f3bd80c82c088ed00c3f21a43754a83dd7244b1.exe"C:\Users\Admin\AppData\Local\Temp\6bdb792ec1bb19748a0468db1f3bd80c82c088ed00c3f21a43754a83dd7244b1.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
PID:1916