Analysis
-
max time kernel
128s -
max time network
33s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system -
submitted
23-11-2022 19:08
Static task
static1
Behavioral task
behavioral1
Sample
afe1ec2facc8654b08d7d39739310781e5d2f6558c82a2ed05fb238bebace341.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
afe1ec2facc8654b08d7d39739310781e5d2f6558c82a2ed05fb238bebace341.exe
Resource
win10v2004-20221111-en
General
-
Target
afe1ec2facc8654b08d7d39739310781e5d2f6558c82a2ed05fb238bebace341.exe
-
Size
149KB
-
MD5
15fd59628be60d153c91f1a63f4f3549
-
SHA1
32f8ce9e8880817b8b1f4a7b327ceb87c2d0e07e
-
SHA256
afe1ec2facc8654b08d7d39739310781e5d2f6558c82a2ed05fb238bebace341
-
SHA512
869ac05a1ed53e743bd8db3db7d6323eb3489fe2d732d6b49e0f62def3c37294e613c8e85562e441248ab1cae219b62351daabc72309052429745d353672c955
-
SSDEEP
3072:s//18iZMhKhI+ubNLmLq9t/JKY/m24y1y5uRnVS+:s//nZMhgI+ubNl9t/JJV4p5udVx
Malware Config
Signatures
-
Processes:
afe1ec2facc8654b08d7d39739310781e5d2f6558c82a2ed05fb238bebace341.exedescription ioc process Key created \REGISTRY\USER\S-1-5-21-3385717845-2518323428-350143044-1000\Software\Microsoft\Internet Explorer\Main afe1ec2facc8654b08d7d39739310781e5d2f6558c82a2ed05fb238bebace341.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
afe1ec2facc8654b08d7d39739310781e5d2f6558c82a2ed05fb238bebace341.exepid process 1668 afe1ec2facc8654b08d7d39739310781e5d2f6558c82a2ed05fb238bebace341.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
Processes:
afe1ec2facc8654b08d7d39739310781e5d2f6558c82a2ed05fb238bebace341.exepid process 1668 afe1ec2facc8654b08d7d39739310781e5d2f6558c82a2ed05fb238bebace341.exe 1668 afe1ec2facc8654b08d7d39739310781e5d2f6558c82a2ed05fb238bebace341.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\afe1ec2facc8654b08d7d39739310781e5d2f6558c82a2ed05fb238bebace341.exe"C:\Users\Admin\AppData\Local\Temp\afe1ec2facc8654b08d7d39739310781e5d2f6558c82a2ed05fb238bebace341.exe"1⤵
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1668