Analysis
-
max time kernel
55s -
max time network
31s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system -
submitted
26/11/2022, 23:38
Behavioral task
behavioral1
Sample
8e91abd007d23a8321a9e27ca48d1e95264796ec98449fa8ceb4faba45c7e81c.exe
Resource
win7-20221111-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
8e91abd007d23a8321a9e27ca48d1e95264796ec98449fa8ceb4faba45c7e81c.exe
Resource
win10v2004-20220901-en
3 signatures
150 seconds
General
-
Target
8e91abd007d23a8321a9e27ca48d1e95264796ec98449fa8ceb4faba45c7e81c.exe
-
Size
1.1MB
-
MD5
5ccc97b15c7e993b40f23cdbf9355657
-
SHA1
4099026cd1b15888fc679b6273d556fec403c4b7
-
SHA256
8e91abd007d23a8321a9e27ca48d1e95264796ec98449fa8ceb4faba45c7e81c
-
SHA512
e3727a37c1156eeeffd65d30a8f79ede414e52615d0d0d1458805bced5420741974616169dbc53cc1d7b02b10d7ade2ec67c037cf28bffb476ee002654698f78
-
SSDEEP
24576:Ld+gRxdjUozjyFrYG0EaiJdCnmALUiuBG+GnPI0UJbc/LM:5+m/CwydEDUiLPI0UFAL
Score
8/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2008-55-0x0000000000400000-0x00000000006E6000-memory.dmp upx behavioral1/memory/2008-56-0x0000000000400000-0x00000000006E6000-memory.dmp upx -
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 2008 8e91abd007d23a8321a9e27ca48d1e95264796ec98449fa8ceb4faba45c7e81c.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2008 8e91abd007d23a8321a9e27ca48d1e95264796ec98449fa8ceb4faba45c7e81c.exe 2008 8e91abd007d23a8321a9e27ca48d1e95264796ec98449fa8ceb4faba45c7e81c.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\8e91abd007d23a8321a9e27ca48d1e95264796ec98449fa8ceb4faba45c7e81c.exe"C:\Users\Admin\AppData\Local\Temp\8e91abd007d23a8321a9e27ca48d1e95264796ec98449fa8ceb4faba45c7e81c.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:2008