Analysis
-
max time kernel
146s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
04/10/2022, 03:41
Static task
static1
Behavioral task
behavioral1
Sample
f0fc712e3510810875a673ea82c220bb41b6c0c98bc6bc9d143be0f4bc099ef4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f0fc712e3510810875a673ea82c220bb41b6c0c98bc6bc9d143be0f4bc099ef4.exe
Resource
win10v2004-20220901-en
General
-
Target
f0fc712e3510810875a673ea82c220bb41b6c0c98bc6bc9d143be0f4bc099ef4.exe
-
Size
35.3MB
-
MD5
ec9e5ff579964cbac1bd8dc777459872
-
SHA1
cf89af7afc76ab02d192e3e62be336a504384ec0
-
SHA256
f0fc712e3510810875a673ea82c220bb41b6c0c98bc6bc9d143be0f4bc099ef4
-
SHA512
a1de646d26233cb3257e6b635202fead4df52795c0eaa3a019d29bb5a3fadf9e8478959f8e0d80dbe904a9630258252d5a1a98878f0c17b2558d4dd7d08e6d25
-
SSDEEP
12288:f8SHWVPN8jEzLrQktiLl1dRAs6U8itdJwI0p2EJVSMsG3gu0p2:f0VP+jsLrtiLrdRLfwRE+SVG3A
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4136 f0fc712e3510810875a673ea82c220bb41b6c0c98bc6bc9d143be0f4bc099ef4.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 4136 f0fc712e3510810875a673ea82c220bb41b6c0c98bc6bc9d143be0f4bc099ef4.exe 4136 f0fc712e3510810875a673ea82c220bb41b6c0c98bc6bc9d143be0f4bc099ef4.exe 4136 f0fc712e3510810875a673ea82c220bb41b6c0c98bc6bc9d143be0f4bc099ef4.exe 4136 f0fc712e3510810875a673ea82c220bb41b6c0c98bc6bc9d143be0f4bc099ef4.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\f0fc712e3510810875a673ea82c220bb41b6c0c98bc6bc9d143be0f4bc099ef4.exe"C:\Users\Admin\AppData\Local\Temp\f0fc712e3510810875a673ea82c220bb41b6c0c98bc6bc9d143be0f4bc099ef4.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:4136