Analysis
-
max time kernel
84s -
max time network
46s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
28/10/2022, 21:20
Static task
static1
Behavioral task
behavioral1
Sample
cadc4445112781020b98ea6d1d721d8d48dd3a3bdfc47caa716dd37d8d8d0894.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cadc4445112781020b98ea6d1d721d8d48dd3a3bdfc47caa716dd37d8d8d0894.exe
Resource
win10v2004-20220812-en
General
-
Target
cadc4445112781020b98ea6d1d721d8d48dd3a3bdfc47caa716dd37d8d8d0894.exe
-
Size
184KB
-
MD5
0c55a27cdfb5b41f0e07fdae34b47130
-
SHA1
c5c9d22e50d1ca9fb4d7076d872d24d23f51b14e
-
SHA256
cadc4445112781020b98ea6d1d721d8d48dd3a3bdfc47caa716dd37d8d8d0894
-
SHA512
d8c312a69e548fe8b120dd14d9e296b8c05ab4d19dbf501dc739bc09e745ac2b983137aa319eb428cbe159a1d810e1127137487452201da9d62d64818f1cd8ff
-
SSDEEP
3072:i9DbDuKlys7g1v7FSYjezoE1zV2zcJaQOMpJq7CFV6ws:i9D+Klo50Yg1QiEMLVhs
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 1008 cadc4445112781020b98ea6d1d721d8d48dd3a3bdfc47caa716dd37d8d8d0894.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1008 cadc4445112781020b98ea6d1d721d8d48dd3a3bdfc47caa716dd37d8d8d0894.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\cadc4445112781020b98ea6d1d721d8d48dd3a3bdfc47caa716dd37d8d8d0894.exe"C:\Users\Admin\AppData\Local\Temp\cadc4445112781020b98ea6d1d721d8d48dd3a3bdfc47caa716dd37d8d8d0894.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
PID:1008