Analysis
-
max time kernel
84s -
max time network
45s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
29/10/2022, 15:11
Static task
static1
Behavioral task
behavioral1
Sample
7f6da558bf6be26312f9660c98ee6a467e6d7d509f7ee2b0967e3252140c7b37.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7f6da558bf6be26312f9660c98ee6a467e6d7d509f7ee2b0967e3252140c7b37.exe
Resource
win10v2004-20220901-en
General
-
Target
7f6da558bf6be26312f9660c98ee6a467e6d7d509f7ee2b0967e3252140c7b37.exe
-
Size
184KB
-
MD5
f257e1fc634ed11b5b70ebacb25bd209
-
SHA1
e057df2060245f65258a5f48b0cb674b884d9db2
-
SHA256
7f6da558bf6be26312f9660c98ee6a467e6d7d509f7ee2b0967e3252140c7b37
-
SHA512
a005a83a94ba1f7df1c99fdec91ecb02539038f1ade4f58934464a9fd1d5b227a1c80be928d75a190207dcb13662e4444743b67726c846f1e7deda1bdd698e03
-
SSDEEP
3072:i9DbDuKlys7g1v7FSYjezoE1zV2zcJaQOMpJq7CFV6wh:i9D+Klo50Yg1QiEMLVhh
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 576 7f6da558bf6be26312f9660c98ee6a467e6d7d509f7ee2b0967e3252140c7b37.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 576 7f6da558bf6be26312f9660c98ee6a467e6d7d509f7ee2b0967e3252140c7b37.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\7f6da558bf6be26312f9660c98ee6a467e6d7d509f7ee2b0967e3252140c7b37.exe"C:\Users\Admin\AppData\Local\Temp\7f6da558bf6be26312f9660c98ee6a467e6d7d509f7ee2b0967e3252140c7b37.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
PID:576