Analysis
-
max time kernel
68s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
19-10-2022 12:38
Behavioral task
behavioral1
Sample
095fd3aa3eed3fd8bdd088a5a83ef80c4157fec9c6ed917fc6b750d38d6fca2f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
095fd3aa3eed3fd8bdd088a5a83ef80c4157fec9c6ed917fc6b750d38d6fca2f.exe
Resource
win10v2004-20220812-en
General
-
Target
095fd3aa3eed3fd8bdd088a5a83ef80c4157fec9c6ed917fc6b750d38d6fca2f.exe
-
Size
95KB
-
MD5
a2254ce1d33b6461664d2a88fd227565
-
SHA1
13c33eac71d6910c31601a7d1144c192e18c7705
-
SHA256
095fd3aa3eed3fd8bdd088a5a83ef80c4157fec9c6ed917fc6b750d38d6fca2f
-
SHA512
0dca450c7ef0a230e5158d62940832f11210fc3f50614c995108456d98a23dc3ac55b57460c548fc7ff1514d4cd9a2e14c0e6ea3341dc0932c42de4a3e2ae076
-
SSDEEP
1536:vOQexVLsZWr/nT7/VK1ORiV2qLSutUf669JaOlrEQXkoGcH5lSFo7EQrkWMalmTt:vOQefrv/NhJq2k4LIQ9rHaFcEQIimT8i
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4876-132-0x0000000000400000-0x000000000043E000-memory.dmp upx behavioral2/memory/4876-133-0x0000000000400000-0x000000000043E000-memory.dmp upx -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4876 095fd3aa3eed3fd8bdd088a5a83ef80c4157fec9c6ed917fc6b750d38d6fca2f.exe 4876 095fd3aa3eed3fd8bdd088a5a83ef80c4157fec9c6ed917fc6b750d38d6fca2f.exe