Analysis
-
max time kernel
81s -
max time network
45s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
07-11-2022 00:07
Static task
static1
Behavioral task
behavioral1
Sample
8ac0d3e6355da3ab307eba7db6f853fcf3708efcfc1e96e940bfe88cfccb8476.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8ac0d3e6355da3ab307eba7db6f853fcf3708efcfc1e96e940bfe88cfccb8476.exe
Resource
win10v2004-20220812-en
General
-
Target
8ac0d3e6355da3ab307eba7db6f853fcf3708efcfc1e96e940bfe88cfccb8476.exe
-
Size
232KB
-
MD5
2004bdbe507c84ba0e736aaa9337d170
-
SHA1
f94184e25d8a5c7403cfdb67829afc6b626ec994
-
SHA256
8ac0d3e6355da3ab307eba7db6f853fcf3708efcfc1e96e940bfe88cfccb8476
-
SHA512
ac73febc913b624f2c42d823f6018161318667439258ca3e9f53e16d20893fa8140653c2a8f30686117b489f323bd79f83d9d51c864cb6dc20a8233ba18f1826
-
SSDEEP
3072:9df1kEQWtAKXbPd3huonXVZwcJaQOMpJq7OUe+gkwL:9dNkEbrPdn3vEMWe+EL
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 1604 8ac0d3e6355da3ab307eba7db6f853fcf3708efcfc1e96e940bfe88cfccb8476.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1604 8ac0d3e6355da3ab307eba7db6f853fcf3708efcfc1e96e940bfe88cfccb8476.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\8ac0d3e6355da3ab307eba7db6f853fcf3708efcfc1e96e940bfe88cfccb8476.exe"C:\Users\Admin\AppData\Local\Temp\8ac0d3e6355da3ab307eba7db6f853fcf3708efcfc1e96e940bfe88cfccb8476.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
PID:1604