Analysis
-
max time kernel
197s -
max time network
205s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 20:04
Static task
static1
Behavioral task
behavioral1
Sample
24ffa4e3c0ee9fd9dd9ffe9a1f975f942f95f0d21a8a61f4bae0b2d7992ed0c8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
24ffa4e3c0ee9fd9dd9ffe9a1f975f942f95f0d21a8a61f4bae0b2d7992ed0c8.exe
Resource
win10v2004-20221111-en
General
-
Target
24ffa4e3c0ee9fd9dd9ffe9a1f975f942f95f0d21a8a61f4bae0b2d7992ed0c8.exe
-
Size
1.7MB
-
MD5
f084afd43e6c2847bc674861b28f0aa9
-
SHA1
00399d1a29be18e66e7cf6b81c9ba5477b4be64c
-
SHA256
24ffa4e3c0ee9fd9dd9ffe9a1f975f942f95f0d21a8a61f4bae0b2d7992ed0c8
-
SHA512
7f0c9bc6251373eab3d694798a7fab0fd1c876f4d00be927eac2e3e1522b88e25e0b48bc1a66564e4b69f0d9ceeb21181209a1204176864869328594426e44f7
-
SSDEEP
49152:6OQFhnR7lTW6Zmv8ErdOVOij98WFDyKIwCnpDWono:qlTWAmv8IdLiZ8WFDVIlnpo
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 4816 24ffa4e3c0ee9fd9dd9ffe9a1f975f942f95f0d21a8a61f4bae0b2d7992ed0c8.exe 4816 24ffa4e3c0ee9fd9dd9ffe9a1f975f942f95f0d21a8a61f4bae0b2d7992ed0c8.exe 4816 24ffa4e3c0ee9fd9dd9ffe9a1f975f942f95f0d21a8a61f4bae0b2d7992ed0c8.exe