Analysis
-
max time kernel
152s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 12:44
Static task
static1
Behavioral task
behavioral1
Sample
f2159af6f6f7ef7005972084a4848899dd695eafb6e54336eec4d677bdc4560e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f2159af6f6f7ef7005972084a4848899dd695eafb6e54336eec4d677bdc4560e.exe
Resource
win10v2004-20221111-en
General
-
Target
f2159af6f6f7ef7005972084a4848899dd695eafb6e54336eec4d677bdc4560e.exe
-
Size
1.6MB
-
MD5
faccad87a8b93a9d20b0312d0b59f6c2
-
SHA1
f54c47560a2ad5e5a8f06846b4819f36fd16d63a
-
SHA256
f2159af6f6f7ef7005972084a4848899dd695eafb6e54336eec4d677bdc4560e
-
SHA512
aa795e7fc8c86bea4bb41a848685f39881333cec2c03cde4dd8cf04a4a05baa25b33d97830864c6ffa6b8683b60c13675566ae1d198f45455ef8e3d4c2151fa9
-
SSDEEP
24576:ho9kwl+eFBpsiEPfXelPrX1/Z0F/klc/B//U:hwkwrBCoL1/qIc/B/c
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes:
f2159af6f6f7ef7005972084a4848899dd695eafb6e54336eec4d677bdc4560e.exepid process 2612 f2159af6f6f7ef7005972084a4848899dd695eafb6e54336eec4d677bdc4560e.exe 2612 f2159af6f6f7ef7005972084a4848899dd695eafb6e54336eec4d677bdc4560e.exe -
Suspicious behavior: LoadsDriver 2 IoCs
Processes:
pid process 664 664 -
Suspicious use of SetWindowsHookEx 2 IoCs
Processes:
f2159af6f6f7ef7005972084a4848899dd695eafb6e54336eec4d677bdc4560e.exepid process 2612 f2159af6f6f7ef7005972084a4848899dd695eafb6e54336eec4d677bdc4560e.exe 2612 f2159af6f6f7ef7005972084a4848899dd695eafb6e54336eec4d677bdc4560e.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\f2159af6f6f7ef7005972084a4848899dd695eafb6e54336eec4d677bdc4560e.exe"C:\Users\Admin\AppData\Local\Temp\f2159af6f6f7ef7005972084a4848899dd695eafb6e54336eec4d677bdc4560e.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:2612