Analysis
-
max time kernel
86s -
max time network
52s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
29/10/2022, 12:26
Static task
static1
Behavioral task
behavioral1
Sample
b287e42052faffa4370f7af24f8df127e67d89e30b5800102abe01effd8d5955.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b287e42052faffa4370f7af24f8df127e67d89e30b5800102abe01effd8d5955.exe
Resource
win10v2004-20220812-en
General
-
Target
b287e42052faffa4370f7af24f8df127e67d89e30b5800102abe01effd8d5955.exe
-
Size
184KB
-
MD5
ce719eb02425a9f07668dc52b9587c18
-
SHA1
7b6f9481e7754cff1cf1ab4475f1c508e6851a71
-
SHA256
b287e42052faffa4370f7af24f8df127e67d89e30b5800102abe01effd8d5955
-
SHA512
8f11e2de2ed6b961fb62ffee99389b9978e2cd6225383b2d69fb753fc29f88ea28843279818b91c0a4e1c24ae3c273408dc637ee9d2dc5fb473c56b15867f51f
-
SSDEEP
3072:i9DbDuKlys7g1v7FSYjezoE1zV2zcJaQOMpJq7CFV6w5:i9D+Klo50Yg1QiEMLVh5
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 1056 b287e42052faffa4370f7af24f8df127e67d89e30b5800102abe01effd8d5955.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1056 b287e42052faffa4370f7af24f8df127e67d89e30b5800102abe01effd8d5955.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\b287e42052faffa4370f7af24f8df127e67d89e30b5800102abe01effd8d5955.exe"C:\Users\Admin\AppData\Local\Temp\b287e42052faffa4370f7af24f8df127e67d89e30b5800102abe01effd8d5955.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
PID:1056