Analysis
-
max time kernel
140s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 17:11
Static task
static1
Behavioral task
behavioral1
Sample
79f25c335cee72572bc9859390514cebc098fadf2d895ed4c63355c70fd40034.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
79f25c335cee72572bc9859390514cebc098fadf2d895ed4c63355c70fd40034.exe
Resource
win10v2004-20221111-en
General
-
Target
79f25c335cee72572bc9859390514cebc098fadf2d895ed4c63355c70fd40034.exe
-
Size
97KB
-
MD5
2c5ba8c178ed9c4849c1ea3b72a80ef2
-
SHA1
2fb3f0e65e1d3728d8a296a59535606656fd3c0d
-
SHA256
79f25c335cee72572bc9859390514cebc098fadf2d895ed4c63355c70fd40034
-
SHA512
0a78bba5a2b5bedcc6ef0902e2c69b4154314c44a74a17cb985ff1a7ab67caa98153a37820c786e99bb77b3ac10ec8e6c236d889f951b4d383019faa3b25e302
-
SSDEEP
1536:8nhrmZcTsaahujJ408CQ5FRoE/ClYpnqisY3Sdt:KhqcTGh0G08vdcuGl
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
79f25c335cee72572bc9859390514cebc098fadf2d895ed4c63355c70fd40034.exepid process 1896 79f25c335cee72572bc9859390514cebc098fadf2d895ed4c63355c70fd40034.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
79f25c335cee72572bc9859390514cebc098fadf2d895ed4c63355c70fd40034.exepid process 1896 79f25c335cee72572bc9859390514cebc098fadf2d895ed4c63355c70fd40034.exe 1896 79f25c335cee72572bc9859390514cebc098fadf2d895ed4c63355c70fd40034.exe 1896 79f25c335cee72572bc9859390514cebc098fadf2d895ed4c63355c70fd40034.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\79f25c335cee72572bc9859390514cebc098fadf2d895ed4c63355c70fd40034.exe"C:\Users\Admin\AppData\Local\Temp\79f25c335cee72572bc9859390514cebc098fadf2d895ed4c63355c70fd40034.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1896