Analysis
-
max time kernel
116s -
max time network
128s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
07/10/2022, 18:29
Static task
static1
Behavioral task
behavioral1
Sample
b0a9133ad0793851d8940e9ce2527b7165f88b1144e658dac5f3f9888d976dbd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b0a9133ad0793851d8940e9ce2527b7165f88b1144e658dac5f3f9888d976dbd.exe
Resource
win10v2004-20220901-en
General
-
Target
b0a9133ad0793851d8940e9ce2527b7165f88b1144e658dac5f3f9888d976dbd.exe
-
Size
2.1MB
-
MD5
ac800224167f86260e1f3acf7b59c99e
-
SHA1
3af74ddaed2335b80a73ce44a16152471b094521
-
SHA256
b0a9133ad0793851d8940e9ce2527b7165f88b1144e658dac5f3f9888d976dbd
-
SHA512
c6961e90cb7f0e1e80b0bb0157d894f0fb91b4f31c12cb3e6ea34396f63ca1bd90bd926f96e20c9df6bf8d000538f209065b9d2c4d0e9902d95cf7ee49ce31ad
-
SSDEEP
24576:aLoQmA2CU6YwDHNfMfe0NHB2XzBASIUdLVQzoBJTkrGvQ0kS0b/GnG/gvTc81EAt:aLPx+e0iiSHLVTkija/GugvD1EAMLwz
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2268 b0a9133ad0793851d8940e9ce2527b7165f88b1144e658dac5f3f9888d976dbd.exe 2268 b0a9133ad0793851d8940e9ce2527b7165f88b1144e658dac5f3f9888d976dbd.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2268 b0a9133ad0793851d8940e9ce2527b7165f88b1144e658dac5f3f9888d976dbd.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\b0a9133ad0793851d8940e9ce2527b7165f88b1144e658dac5f3f9888d976dbd.exe"C:\Users\Admin\AppData\Local\Temp\b0a9133ad0793851d8940e9ce2527b7165f88b1144e658dac5f3f9888d976dbd.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
PID:2268