Analysis
-
max time kernel
149s -
max time network
141s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
04/11/2022, 21:49
Static task
static1
Behavioral task
behavioral1
Sample
9eb2ed6a1eae10bf2ee5c073d7d7af5b3504cb7e6a1928933636c9b4ca01e31f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9eb2ed6a1eae10bf2ee5c073d7d7af5b3504cb7e6a1928933636c9b4ca01e31f.exe
Resource
win10v2004-20220812-en
General
-
Target
9eb2ed6a1eae10bf2ee5c073d7d7af5b3504cb7e6a1928933636c9b4ca01e31f.exe
-
Size
888KB
-
MD5
3ac620e4b46f157439af164914f4bdd6
-
SHA1
8226def46aa395cb62b6e4718414710c8b196238
-
SHA256
9eb2ed6a1eae10bf2ee5c073d7d7af5b3504cb7e6a1928933636c9b4ca01e31f
-
SHA512
fcb2343af02e5d8f5e40fa9bf1d1c2f7228e8d7577080ce089c318a7615aee1a61c6366d97f1ad0f793de2022a05f081d42e53670bf72f03ad49514474f02389
-
SSDEEP
12288:Qb/9HFIt1eMJXCWPtSZ5Rt3NqcDKl9NNlgNrKNYjS93lnzk6A9:QT81Le5b9qkiTcNhSTc
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3168 9eb2ed6a1eae10bf2ee5c073d7d7af5b3504cb7e6a1928933636c9b4ca01e31f.exe 3168 9eb2ed6a1eae10bf2ee5c073d7d7af5b3504cb7e6a1928933636c9b4ca01e31f.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3168 9eb2ed6a1eae10bf2ee5c073d7d7af5b3504cb7e6a1928933636c9b4ca01e31f.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\9eb2ed6a1eae10bf2ee5c073d7d7af5b3504cb7e6a1928933636c9b4ca01e31f.exe"C:\Users\Admin\AppData\Local\Temp\9eb2ed6a1eae10bf2ee5c073d7d7af5b3504cb7e6a1928933636c9b4ca01e31f.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:3168