Analysis
-
max time kernel
45s -
max time network
49s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system -
submitted
11/10/2022, 06:32
Static task
static1
Behavioral task
behavioral1
Sample
ddc36271746a38fd0af19f43d4f76f24aba08c0b76e766f7115f9a8f494bde81.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ddc36271746a38fd0af19f43d4f76f24aba08c0b76e766f7115f9a8f494bde81.exe
Resource
win10v2004-20220812-en
General
-
Target
ddc36271746a38fd0af19f43d4f76f24aba08c0b76e766f7115f9a8f494bde81.exe
-
Size
767KB
-
MD5
7c2424a3c3548fe475e16d10e5e18b50
-
SHA1
c6a67fa3db86385781a9d6512ed3bd19ce700198
-
SHA256
ddc36271746a38fd0af19f43d4f76f24aba08c0b76e766f7115f9a8f494bde81
-
SHA512
ee64bf32108bfe9b9156bb42edc9a28de34ed9331cd7d4ef3f049bee53beda780bdcce79d4e99072ee39ee51d73c3af623a1dd030a3d3003e10f130797ea3ce0
-
SSDEEP
12288:mdsngxZoh0ucDuCkZurIi7oriJ+VM85CIJ91KBLiUbsnt6JrXbiDAYvT93b7MG58:asngtDuCkZurLo2CF5CIJ91KBXsnt61/
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 1048 ddc36271746a38fd0af19f43d4f76f24aba08c0b76e766f7115f9a8f494bde81.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1048 ddc36271746a38fd0af19f43d4f76f24aba08c0b76e766f7115f9a8f494bde81.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\ddc36271746a38fd0af19f43d4f76f24aba08c0b76e766f7115f9a8f494bde81.exe"C:\Users\Admin\AppData\Local\Temp\ddc36271746a38fd0af19f43d4f76f24aba08c0b76e766f7115f9a8f494bde81.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:1048