Analysis
-
max time kernel
188s -
max time network
35s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system -
submitted
23-11-2022 11:27
Static task
static1
Behavioral task
behavioral1
Sample
21997f51b3d1022fe947ee1d057e73c755724915b781ec2ee47fa275592d55bc.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
21997f51b3d1022fe947ee1d057e73c755724915b781ec2ee47fa275592d55bc.exe
Resource
win10v2004-20221111-en
General
-
Target
21997f51b3d1022fe947ee1d057e73c755724915b781ec2ee47fa275592d55bc.exe
-
Size
1.6MB
-
MD5
d84e6ba7238aa8750058b8a05f225d06
-
SHA1
ee819e1ae4ca68682ea00c4bd7facb747a1638c6
-
SHA256
21997f51b3d1022fe947ee1d057e73c755724915b781ec2ee47fa275592d55bc
-
SHA512
ea5157ecfc432d5dd527ed9d86b91759f5e61f4548ac442ded1c1aed4e8ab8eebbc750b0660e4193ae82e406d7df7e5c4ed8293e4110d4bcae55587831be63cd
-
SSDEEP
24576:DW4vfo3Rz1sWsuzT6XjfAjvCi3y9HpX3kkYFmo7hNhW9IPCqXatUx16gTv/VDW:DW4vfo3x1tTP3iBpXsgI1yI16gTv/VK
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
21997f51b3d1022fe947ee1d057e73c755724915b781ec2ee47fa275592d55bc.exepid process 824 21997f51b3d1022fe947ee1d057e73c755724915b781ec2ee47fa275592d55bc.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
Processes:
21997f51b3d1022fe947ee1d057e73c755724915b781ec2ee47fa275592d55bc.exepid process 824 21997f51b3d1022fe947ee1d057e73c755724915b781ec2ee47fa275592d55bc.exe 824 21997f51b3d1022fe947ee1d057e73c755724915b781ec2ee47fa275592d55bc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\21997f51b3d1022fe947ee1d057e73c755724915b781ec2ee47fa275592d55bc.exe"C:\Users\Admin\AppData\Local\Temp\21997f51b3d1022fe947ee1d057e73c755724915b781ec2ee47fa275592d55bc.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:824
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/824-54-0x0000000075E11000-0x0000000075E13000-memory.dmpFilesize
8KB