Analysis
-
max time kernel
20s -
max time network
35s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system -
submitted
21/11/2022, 13:46
Static task
static1
Behavioral task
behavioral1
Sample
31e0b9392497e2efe9901f809512e104bec0316b4f8e5f2893e9f31d9d3411da.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
31e0b9392497e2efe9901f809512e104bec0316b4f8e5f2893e9f31d9d3411da.exe
Resource
win10v2004-20220812-en
General
-
Target
31e0b9392497e2efe9901f809512e104bec0316b4f8e5f2893e9f31d9d3411da.exe
-
Size
112KB
-
MD5
3b1057b59238bfcccb04372467352000
-
SHA1
56e0746b2ccba1bb9403108207d891654cac96a6
-
SHA256
31e0b9392497e2efe9901f809512e104bec0316b4f8e5f2893e9f31d9d3411da
-
SHA512
ca7a6849bdbe4050cc45ff915ef8aeddf5d21e35f937daf8b4708a921ce6cc9f13fb7debaa2032f09d9724b7df1b6458fe6d63d112cb827724c1b35cc0194bd8
-
SSDEEP
1536:o6T91N9o4FSXQ3yxSZsBDeycFrX8NXseMMMMvSIc7kfRVhEXkiZ2:ow1WgkSZsleNeMMMMPcYhEXvo
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 5 IoCs
pid Process 1588 31e0b9392497e2efe9901f809512e104bec0316b4f8e5f2893e9f31d9d3411da.exe 1588 31e0b9392497e2efe9901f809512e104bec0316b4f8e5f2893e9f31d9d3411da.exe 1588 31e0b9392497e2efe9901f809512e104bec0316b4f8e5f2893e9f31d9d3411da.exe 1588 31e0b9392497e2efe9901f809512e104bec0316b4f8e5f2893e9f31d9d3411da.exe 1588 31e0b9392497e2efe9901f809512e104bec0316b4f8e5f2893e9f31d9d3411da.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1588 31e0b9392497e2efe9901f809512e104bec0316b4f8e5f2893e9f31d9d3411da.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\31e0b9392497e2efe9901f809512e104bec0316b4f8e5f2893e9f31d9d3411da.exe"C:\Users\Admin\AppData\Local\Temp\31e0b9392497e2efe9901f809512e104bec0316b4f8e5f2893e9f31d9d3411da.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:1588