Analysis
-
max time kernel
41s -
max time network
45s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
23-11-2022 18:51
Behavioral task
behavioral1
Sample
a0420c85aa15dce36acd39749d1e7d30262c4e0520a5c477c10fe7d2987fdf29.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a0420c85aa15dce36acd39749d1e7d30262c4e0520a5c477c10fe7d2987fdf29.exe
Resource
win10v2004-20220812-en
General
-
Target
a0420c85aa15dce36acd39749d1e7d30262c4e0520a5c477c10fe7d2987fdf29.exe
-
Size
1.2MB
-
MD5
26beb788942fb75ca37a9fb6639f1133
-
SHA1
59beaf37801ab0df63b9600a6e2fb69b1b837ecc
-
SHA256
a0420c85aa15dce36acd39749d1e7d30262c4e0520a5c477c10fe7d2987fdf29
-
SHA512
d5f467279feb7b6da7e97777569012ce426af093fde3f1396eb77cb6ede05d57dfe9814442fa65e6995e25dec6d12398c0c4ea864a5bfe61521406c6029f7adc
-
SSDEEP
24576:8qlRlz0i4lIwv4f921ZFoDXA/ahHwWMSw+YHtVjAgzpst7tAzT6IxwH:V/vhFwdoQa6dBHtVjiaT6IE
Malware Config
Signatures
-
Processes:
resource yara_rule behavioral1/memory/1832-54-0x0000000000400000-0x000000000077F000-memory.dmp vmprotect behavioral1/memory/1832-57-0x0000000000400000-0x000000000077F000-memory.dmp vmprotect behavioral1/memory/1832-58-0x0000000000400000-0x000000000077F000-memory.dmp vmprotect -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
a0420c85aa15dce36acd39749d1e7d30262c4e0520a5c477c10fe7d2987fdf29.exepid process 1832 a0420c85aa15dce36acd39749d1e7d30262c4e0520a5c477c10fe7d2987fdf29.exe