Analysis
-
max time kernel
116s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
06/10/2022, 20:27
Static task
static1
Behavioral task
behavioral1
Sample
ab9451ccc8a8303c2fbf0abf7a6f20ec0aef2a90bff99bd177dade119d6cad0b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ab9451ccc8a8303c2fbf0abf7a6f20ec0aef2a90bff99bd177dade119d6cad0b.exe
Resource
win10v2004-20220812-en
General
-
Target
ab9451ccc8a8303c2fbf0abf7a6f20ec0aef2a90bff99bd177dade119d6cad0b.exe
-
Size
925KB
-
MD5
ee981db9792d2e34bd3e0646a5504430
-
SHA1
cee986b5f345898c3e6360e050e9f15b090941ce
-
SHA256
ab9451ccc8a8303c2fbf0abf7a6f20ec0aef2a90bff99bd177dade119d6cad0b
-
SHA512
3abaaceb2e1fbf064a973d14d4a123602e0888e3592e1b41435993edf1b37d0d1b305cdfb8bb89e5c0455acf68d3bee34cdff93e53ddeb31c8190562ca6c5b1e
-
SSDEEP
12288:bBbwi3U1qQNdSw/i/NIXDe9sgmV2gWTXQwCYs8XoBQSU3GuXrkCkeTTjj888888Z:CuidSw/qsrgG2owNYBQSU3BXT
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3268 ab9451ccc8a8303c2fbf0abf7a6f20ec0aef2a90bff99bd177dade119d6cad0b.exe 3268 ab9451ccc8a8303c2fbf0abf7a6f20ec0aef2a90bff99bd177dade119d6cad0b.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3268 ab9451ccc8a8303c2fbf0abf7a6f20ec0aef2a90bff99bd177dade119d6cad0b.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\ab9451ccc8a8303c2fbf0abf7a6f20ec0aef2a90bff99bd177dade119d6cad0b.exe"C:\Users\Admin\AppData\Local\Temp\ab9451ccc8a8303c2fbf0abf7a6f20ec0aef2a90bff99bd177dade119d6cad0b.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
PID:3268