Analysis
-
max time kernel
93s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
24-11-2022 00:10
Static task
static1
Behavioral task
behavioral1
Sample
70cb54f108de16fe35b1dfabea407b7b21c149a96d090c5582b0893fb40b55cb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
70cb54f108de16fe35b1dfabea407b7b21c149a96d090c5582b0893fb40b55cb.exe
Resource
win10v2004-20220901-en
General
-
Target
70cb54f108de16fe35b1dfabea407b7b21c149a96d090c5582b0893fb40b55cb.exe
-
Size
392KB
-
MD5
89ebfda45526f5ffac0044a7136d7695
-
SHA1
f8eb7f37dd849568d034e051ed180cc4983e7fdb
-
SHA256
70cb54f108de16fe35b1dfabea407b7b21c149a96d090c5582b0893fb40b55cb
-
SHA512
07f50c09d94a26e47334ab2dd11d3c5fa92e38ecb89282002cf0bab8decb5b7db1a9e4a268fb62298a1c92a27787692c3799383e1351108126c0a50d51cfce8a
-
SSDEEP
6144:quqE1DQYAn9n/sqcsHtoHcv/65MxKDaRbVS4pyFPQyvJ+Au:qDYin9n1csHto8vi5MfRxS4puQyv
Malware Config
Signatures
-
Drops file in Program Files directory 2 IoCs
Processes:
70cb54f108de16fe35b1dfabea407b7b21c149a96d090c5582b0893fb40b55cb.exedescription ioc process File created C:\Program Files (x86)\Wincast\NCPrgSetup2.0.0.2.dat 70cb54f108de16fe35b1dfabea407b7b21c149a96d090c5582b0893fb40b55cb.exe File opened for modification C:\Program Files (x86)\Wincast\NCPrgSetup2.0.0.2.dat 70cb54f108de16fe35b1dfabea407b7b21c149a96d090c5582b0893fb40b55cb.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
Processes:
70cb54f108de16fe35b1dfabea407b7b21c149a96d090c5582b0893fb40b55cb.exepid process 1688 70cb54f108de16fe35b1dfabea407b7b21c149a96d090c5582b0893fb40b55cb.exe 1688 70cb54f108de16fe35b1dfabea407b7b21c149a96d090c5582b0893fb40b55cb.exe