Analysis
-
max time kernel
83s -
max time network
45s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
29-10-2022 14:15
Static task
static1
Behavioral task
behavioral1
Sample
0aa21f304f4073aa2c1ab406d40f193dac6812ca4bf0b787067a0557a4bda687.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0aa21f304f4073aa2c1ab406d40f193dac6812ca4bf0b787067a0557a4bda687.exe
Resource
win10v2004-20220812-en
General
-
Target
0aa21f304f4073aa2c1ab406d40f193dac6812ca4bf0b787067a0557a4bda687.exe
-
Size
192KB
-
MD5
9b0937728e75a2a05fc6fa5c0a68afe2
-
SHA1
8b0975dbc76766277030fd0f31eaad898f877c91
-
SHA256
0aa21f304f4073aa2c1ab406d40f193dac6812ca4bf0b787067a0557a4bda687
-
SHA512
138caa0a38e965f5b6ec35aa8bb0a472ef7fed4eb7e14364a34da1a85fd6772dd632be1b67594a66abd1d921a9c1307a676bc145f0cf01de0964ca23056f08ae
-
SSDEEP
3072:LlPPPksNEWiZ1kyKE+IKtkr93JRjwsmVUHDnXI+3gTVzyscJaQOMpAQdI6VQN:LlNiQIKtu/wDUk5JyTEMHVQN
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 1944 0aa21f304f4073aa2c1ab406d40f193dac6812ca4bf0b787067a0557a4bda687.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1944 0aa21f304f4073aa2c1ab406d40f193dac6812ca4bf0b787067a0557a4bda687.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\0aa21f304f4073aa2c1ab406d40f193dac6812ca4bf0b787067a0557a4bda687.exe"C:\Users\Admin\AppData\Local\Temp\0aa21f304f4073aa2c1ab406d40f193dac6812ca4bf0b787067a0557a4bda687.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
PID:1944