Analysis
-
max time kernel
86s -
max time network
40s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
28/10/2022, 22:31
Static task
static1
Behavioral task
behavioral1
Sample
27855a59bae9c1034d1b26574ea2d5efac6c15b79afc2601b7ac35058dca1b75.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
27855a59bae9c1034d1b26574ea2d5efac6c15b79afc2601b7ac35058dca1b75.exe
Resource
win10v2004-20220812-en
General
-
Target
27855a59bae9c1034d1b26574ea2d5efac6c15b79afc2601b7ac35058dca1b75.exe
-
Size
1.1MB
-
MD5
65f206b6e7f893a96c077b6e8be39ae7
-
SHA1
c6b5c47d7ff9aae097f2b1db544ca1cd779cbe65
-
SHA256
27855a59bae9c1034d1b26574ea2d5efac6c15b79afc2601b7ac35058dca1b75
-
SHA512
7c4e0b24609a29fb24bee4ef32216f84f01811a2fc5ac8e90bbf4283b27eefd9ed9cd1d575f93a8642a5be5cb1d763ba78459891a5772c17af934eee663b9845
-
SSDEEP
24576:X1qDTh5bO7vwXor2ZwAKY5J1+3qzwOqep1////r55BL7EP/7Rl////r55B7ZE//J:XA3bI2ZyY31+6zdqI////r55BL7EP/7E
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4856-138-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral2/memory/4856-150-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral2/memory/4856-164-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral2/memory/4856-166-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral2/memory/4856-162-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral2/memory/4856-160-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral2/memory/4856-158-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral2/memory/4856-156-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral2/memory/4856-154-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral2/memory/4856-172-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral2/memory/4856-174-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral2/memory/4856-170-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral2/memory/4856-168-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral2/memory/4856-152-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral2/memory/4856-148-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral2/memory/4856-146-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral2/memory/4856-144-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral2/memory/4856-142-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral2/memory/4856-140-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral2/memory/4856-136-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral2/memory/4856-134-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral2/memory/4856-133-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral2/memory/4856-132-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral2/memory/4856-175-0x0000000010000000-0x000000001003D000-memory.dmp upx -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 4856 27855a59bae9c1034d1b26574ea2d5efac6c15b79afc2601b7ac35058dca1b75.exe 4856 27855a59bae9c1034d1b26574ea2d5efac6c15b79afc2601b7ac35058dca1b75.exe 4856 27855a59bae9c1034d1b26574ea2d5efac6c15b79afc2601b7ac35058dca1b75.exe