Analysis
-
max time kernel
134s -
max time network
31s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system -
submitted
25/11/2022, 11:48
Static task
static1
Behavioral task
behavioral1
Sample
710a73f9a92d4ecc11c70598a749429d42ae24d298e0550ff98a82117f1881be.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
710a73f9a92d4ecc11c70598a749429d42ae24d298e0550ff98a82117f1881be.exe
Resource
win10v2004-20220812-en
General
-
Target
710a73f9a92d4ecc11c70598a749429d42ae24d298e0550ff98a82117f1881be.exe
-
Size
21KB
-
MD5
3dc1341d36720dde34b0b24bd748b3db
-
SHA1
f85dd786272a395f7e4907b39525695317bb9e07
-
SHA256
710a73f9a92d4ecc11c70598a749429d42ae24d298e0550ff98a82117f1881be
-
SHA512
c6bca65764dea509c6b8399c55510cb4132d0cec56de655d15aa665d14b0e6fed4840057844b640856ab8683497102a6df3b35f118a90a684ed9b2c2ed772d3e
-
SSDEEP
384:dcVb4yI964WfYqw1jydX7WJMejKD2W/PtO93liDYb:dcaP9jWwNyxyantOzqYb
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2044 710a73f9a92d4ecc11c70598a749429d42ae24d298e0550ff98a82117f1881be.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2044 710a73f9a92d4ecc11c70598a749429d42ae24d298e0550ff98a82117f1881be.exe 2044 710a73f9a92d4ecc11c70598a749429d42ae24d298e0550ff98a82117f1881be.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\710a73f9a92d4ecc11c70598a749429d42ae24d298e0550ff98a82117f1881be.exe"C:\Users\Admin\AppData\Local\Temp\710a73f9a92d4ecc11c70598a749429d42ae24d298e0550ff98a82117f1881be.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2044