Analysis
-
max time kernel
127s -
max time network
30s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system -
submitted
23-11-2022 17:11
Static task
static1
Behavioral task
behavioral1
Sample
79f25c335cee72572bc9859390514cebc098fadf2d895ed4c63355c70fd40034.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
79f25c335cee72572bc9859390514cebc098fadf2d895ed4c63355c70fd40034.exe
Resource
win10v2004-20221111-en
General
-
Target
79f25c335cee72572bc9859390514cebc098fadf2d895ed4c63355c70fd40034.exe
-
Size
97KB
-
MD5
2c5ba8c178ed9c4849c1ea3b72a80ef2
-
SHA1
2fb3f0e65e1d3728d8a296a59535606656fd3c0d
-
SHA256
79f25c335cee72572bc9859390514cebc098fadf2d895ed4c63355c70fd40034
-
SHA512
0a78bba5a2b5bedcc6ef0902e2c69b4154314c44a74a17cb985ff1a7ab67caa98153a37820c786e99bb77b3ac10ec8e6c236d889f951b4d383019faa3b25e302
-
SSDEEP
1536:8nhrmZcTsaahujJ408CQ5FRoE/ClYpnqisY3Sdt:KhqcTGh0G08vdcuGl
Malware Config
Signatures
-
Processes:
79f25c335cee72572bc9859390514cebc098fadf2d895ed4c63355c70fd40034.exedescription ioc process Key created \REGISTRY\USER\S-1-5-21-575491160-2295418218-1540667289-1000\Software\Microsoft\Internet Explorer\Main 79f25c335cee72572bc9859390514cebc098fadf2d895ed4c63355c70fd40034.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
79f25c335cee72572bc9859390514cebc098fadf2d895ed4c63355c70fd40034.exepid process 1336 79f25c335cee72572bc9859390514cebc098fadf2d895ed4c63355c70fd40034.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
79f25c335cee72572bc9859390514cebc098fadf2d895ed4c63355c70fd40034.exepid process 1336 79f25c335cee72572bc9859390514cebc098fadf2d895ed4c63355c70fd40034.exe 1336 79f25c335cee72572bc9859390514cebc098fadf2d895ed4c63355c70fd40034.exe 1336 79f25c335cee72572bc9859390514cebc098fadf2d895ed4c63355c70fd40034.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\79f25c335cee72572bc9859390514cebc098fadf2d895ed4c63355c70fd40034.exe"C:\Users\Admin\AppData\Local\Temp\79f25c335cee72572bc9859390514cebc098fadf2d895ed4c63355c70fd40034.exe"1⤵
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1336