Analysis
-
max time kernel
42s -
max time network
47s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
25-11-2022 23:07
Static task
static1
Behavioral task
behavioral1
Sample
fa1bd226780a52c8da5aa690ab45d9d34d640eff66a9da0e291be36656f5b10d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fa1bd226780a52c8da5aa690ab45d9d34d640eff66a9da0e291be36656f5b10d.exe
Resource
win10v2004-20221111-en
General
-
Target
fa1bd226780a52c8da5aa690ab45d9d34d640eff66a9da0e291be36656f5b10d.exe
-
Size
456KB
-
MD5
15e710ddcab46efea8056305fdaeb3ad
-
SHA1
204c1b48f327152d612dc80e624e5b1ce7b8a142
-
SHA256
fa1bd226780a52c8da5aa690ab45d9d34d640eff66a9da0e291be36656f5b10d
-
SHA512
bca3ba3d787421bc48c364653802b70156be4c8d8cebd88e0246cf60ef96464f44168f4329e0dba600c58b42aca7f07fedda450ce22041625b7dce827814fedd
-
SSDEEP
12288:LGze7BC6FwCqk/buPkUmLIVxHti1APeQlg9pAFfo1rpK:iSsRxk/bgzWIVz5PeKg9qf8k
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes:
fa1bd226780a52c8da5aa690ab45d9d34d640eff66a9da0e291be36656f5b10d.exepid process 1916 fa1bd226780a52c8da5aa690ab45d9d34d640eff66a9da0e291be36656f5b10d.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
Processes:
fa1bd226780a52c8da5aa690ab45d9d34d640eff66a9da0e291be36656f5b10d.exepid process 1916 fa1bd226780a52c8da5aa690ab45d9d34d640eff66a9da0e291be36656f5b10d.exe 1916 fa1bd226780a52c8da5aa690ab45d9d34d640eff66a9da0e291be36656f5b10d.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\fa1bd226780a52c8da5aa690ab45d9d34d640eff66a9da0e291be36656f5b10d.exe"C:\Users\Admin\AppData\Local\Temp\fa1bd226780a52c8da5aa690ab45d9d34d640eff66a9da0e291be36656f5b10d.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx