Analysis
-
max time kernel
142s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
30-10-2022 12:08
Static task
static1
Behavioral task
behavioral1
Sample
c05828bbf596f85c34eb5a2899dca3aeed18965fd1b34733242e1d37dccc7b33.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c05828bbf596f85c34eb5a2899dca3aeed18965fd1b34733242e1d37dccc7b33.exe
Resource
win10v2004-20220812-en
General
-
Target
c05828bbf596f85c34eb5a2899dca3aeed18965fd1b34733242e1d37dccc7b33.exe
-
Size
154KB
-
MD5
a2c56e2968d8687856267a668b0438c0
-
SHA1
dd6a5d68b9819ab8d363005c3110c1984cf885b6
-
SHA256
c05828bbf596f85c34eb5a2899dca3aeed18965fd1b34733242e1d37dccc7b33
-
SHA512
7979f956bfe78332c1b064510c1d463535845410562031f914f1e6151da784e3890948526349e7d37130c07a66cf22bfa42b0951c4d84cb8001194ab11b1ffc8
-
SSDEEP
1536:TjHWUBjVLTfo9yUKFCBy2uvl/0yB+BwU0yHp3JJWKucqqUT:Tjtj5Tbd6mF0yQBVdJxPUT
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4732 c05828bbf596f85c34eb5a2899dca3aeed18965fd1b34733242e1d37dccc7b33.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4732 c05828bbf596f85c34eb5a2899dca3aeed18965fd1b34733242e1d37dccc7b33.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\c05828bbf596f85c34eb5a2899dca3aeed18965fd1b34733242e1d37dccc7b33.exe"C:\Users\Admin\AppData\Local\Temp\c05828bbf596f85c34eb5a2899dca3aeed18965fd1b34733242e1d37dccc7b33.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:4732