Analysis
-
max time kernel
150s -
max time network
181s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 18:58
Behavioral task
behavioral1
Sample
ac8f30b1decc022ff93e78d3fab8da65b8ba57248cf2212bf86d5a901fc5125e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ac8f30b1decc022ff93e78d3fab8da65b8ba57248cf2212bf86d5a901fc5125e.exe
Resource
win10v2004-20221111-en
General
-
Target
ac8f30b1decc022ff93e78d3fab8da65b8ba57248cf2212bf86d5a901fc5125e.exe
-
Size
202KB
-
MD5
dd2e70648c85832a18a93d8e07f3c800
-
SHA1
d58c867b49cb38a8b0ea15e633827ea38e74f0d1
-
SHA256
ac8f30b1decc022ff93e78d3fab8da65b8ba57248cf2212bf86d5a901fc5125e
-
SHA512
9c03977f4edcd4b9cb4e2ddb5873bd8bef396a6124302517363509ce52a0f7dfefc3eb013424688385a07ff9b7592f6e95df7694b31e74512d954368d5f29ff4
-
SSDEEP
6144:yiJDLfS7zaGAlRi/oXUcTmW3vEXO88lcV1Q+3DALQsiLKHjz:ZPS/alTmWfEXO88lmNIQsiLkjz
Malware Config
Signatures
-
Processes:
resource yara_rule behavioral2/memory/4832-132-0x0000000000400000-0x000000000064C000-memory.dmp upx behavioral2/memory/4832-133-0x0000000000400000-0x000000000064C000-memory.dmp upx -
Suspicious use of SetWindowsHookEx 4 IoCs
Processes:
ac8f30b1decc022ff93e78d3fab8da65b8ba57248cf2212bf86d5a901fc5125e.exepid process 4832 ac8f30b1decc022ff93e78d3fab8da65b8ba57248cf2212bf86d5a901fc5125e.exe 4832 ac8f30b1decc022ff93e78d3fab8da65b8ba57248cf2212bf86d5a901fc5125e.exe 4832 ac8f30b1decc022ff93e78d3fab8da65b8ba57248cf2212bf86d5a901fc5125e.exe 4832 ac8f30b1decc022ff93e78d3fab8da65b8ba57248cf2212bf86d5a901fc5125e.exe