Analysis
-
max time kernel
159s -
max time network
33s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system -
submitted
23-11-2022 20:54
Static task
static1
Behavioral task
behavioral1
Sample
b0c7aba952f7df7b796030474cb208d77f0437cd5456357280ab20af9a32d8ce.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b0c7aba952f7df7b796030474cb208d77f0437cd5456357280ab20af9a32d8ce.exe
Resource
win10v2004-20220812-en
General
-
Target
b0c7aba952f7df7b796030474cb208d77f0437cd5456357280ab20af9a32d8ce.exe
-
Size
897KB
-
MD5
8d029a88315fb08cb5b508e6baeb63d5
-
SHA1
084015c3bd4b914273a337b4cdf7e64b3737f310
-
SHA256
b0c7aba952f7df7b796030474cb208d77f0437cd5456357280ab20af9a32d8ce
-
SHA512
fb11c1ae186392c6818e65a1bf467be7bd97ceb7c9824e3bd786906f625260d4b21854ff647f92962c5615008822c1134924d89679b641b1d36940b6cc83ce66
-
SSDEEP
12288:Z9o2HYYuxp9Mc8QTmWWcGLh3OJMxFdYlBaCuYO4fN77oih1wG:UYuSWU+JMxKaC7f1061w
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
b0c7aba952f7df7b796030474cb208d77f0437cd5456357280ab20af9a32d8ce.exepid process 2012 b0c7aba952f7df7b796030474cb208d77f0437cd5456357280ab20af9a32d8ce.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
Processes:
b0c7aba952f7df7b796030474cb208d77f0437cd5456357280ab20af9a32d8ce.exepid process 2012 b0c7aba952f7df7b796030474cb208d77f0437cd5456357280ab20af9a32d8ce.exe 2012 b0c7aba952f7df7b796030474cb208d77f0437cd5456357280ab20af9a32d8ce.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\b0c7aba952f7df7b796030474cb208d77f0437cd5456357280ab20af9a32d8ce.exe"C:\Users\Admin\AppData\Local\Temp\b0c7aba952f7df7b796030474cb208d77f0437cd5456357280ab20af9a32d8ce.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2012