Analysis
-
max time kernel
32s -
max time network
48s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
30/10/2022, 08:32
Behavioral task
behavioral1
Sample
0604ef5cefd3cfab12c676526777e15d78065a73d2517294bc0671018e54df62.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0604ef5cefd3cfab12c676526777e15d78065a73d2517294bc0671018e54df62.exe
Resource
win10v2004-20220812-en
General
-
Target
0604ef5cefd3cfab12c676526777e15d78065a73d2517294bc0671018e54df62.exe
-
Size
171KB
-
MD5
a3271a9d91d0b863031b05e0b903b2c8
-
SHA1
95236153139783efce4b63fbe20816a74d7173ce
-
SHA256
0604ef5cefd3cfab12c676526777e15d78065a73d2517294bc0671018e54df62
-
SHA512
af955f6ad969dd8354278a027c5e1528adf18f6e4ec6ef11a2e6cb886ef6ae16e68adfb40c0755727e8ed66c306881515ee0b614c18dcd6e7aed0dc85145d710
-
SSDEEP
3072:NwwcwLBQQIIEyFmc8BZniEC+kL62L+1KWqt7tR5OTNL5TE1ZDUI/GWRo2rXfZD:Sj44IEyFBInpCV62ayxr5ORdTE1dUI+I
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1680-55-0x0000000000400000-0x0000000000466000-memory.dmp upx behavioral1/memory/1680-56-0x0000000000400000-0x0000000000466000-memory.dmp upx -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1680 0604ef5cefd3cfab12c676526777e15d78065a73d2517294bc0671018e54df62.exe 1680 0604ef5cefd3cfab12c676526777e15d78065a73d2517294bc0671018e54df62.exe