Analysis
-
max time kernel
145s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
20/10/2022, 02:01
General
-
Target
0dad7dc16420049e6e6979540b572bb4316933b8b7694c72495fb76c94c056c1.exe
-
Size
60KB
-
MD5
80d42e1f36a996b40caba4f7d6db926d
-
SHA1
6fb5fe4f812b396acf071a18b3f61320258fdca8
-
SHA256
0dad7dc16420049e6e6979540b572bb4316933b8b7694c72495fb76c94c056c1
-
SHA512
97daffcacce330e534366de467e27255848e434a9d12449ac866efe89da9eeb4015f0f9880af51a4c40ba9e7b8533ab36599cbc89663fa02eca346b9f4659e55
-
SSDEEP
768:5adN3RZSUwDuYNlvvOyHARtNiShGMGJiEVUoZ04qs1tHXe/7x/V2fmVO:5adNYuYNlvv2tYjUoZ0Ts1tHEVxO
Score
6/10
Malware Config
Signatures
-
Looks up external IP address via web service 3 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Modifies registry class 3 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0dad7dc16420049e6e6979540b572bb4316933b8b7694c72495fb76c94c056c1.exe"C:\Users\Admin\AppData\Local\Temp\0dad7dc16420049e6e6979540b572bb4316933b8b7694c72495fb76c94c056c1.exe"1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx