Analysis
-
max time kernel
150s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
27-11-2022 04:16
Static task
static1
Behavioral task
behavioral1
Sample
f2ae655ebe0fa6560014208edb4b99a6ee73e2afb8eaddbec28aa9bfdef49111.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f2ae655ebe0fa6560014208edb4b99a6ee73e2afb8eaddbec28aa9bfdef49111.exe
Resource
win10v2004-20221111-en
General
-
Target
f2ae655ebe0fa6560014208edb4b99a6ee73e2afb8eaddbec28aa9bfdef49111.exe
-
Size
152KB
-
MD5
e3d546b59649f56c0dfe1a48bba36b9e
-
SHA1
44a268a25f670f3bcd6e159f2f2bba1de6dcb5c4
-
SHA256
f2ae655ebe0fa6560014208edb4b99a6ee73e2afb8eaddbec28aa9bfdef49111
-
SHA512
6d5af22f2819bd63aedbb7a6b6818d770b6e808928a1b59e5292cdb4e8271dce0c6d6c2c91fc404a3a071d912ab2ecabf6b9abfcf6757418494010cdc115fb3c
-
SSDEEP
3072:laZ7Erx+mQfPP+GfVRGWKbtdZRAyxtsN3hccNc0v:qE8FPP+aCvYNxccNc
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 668 f2ae655ebe0fa6560014208edb4b99a6ee73e2afb8eaddbec28aa9bfdef49111.exe 668 f2ae655ebe0fa6560014208edb4b99a6ee73e2afb8eaddbec28aa9bfdef49111.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 668 f2ae655ebe0fa6560014208edb4b99a6ee73e2afb8eaddbec28aa9bfdef49111.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\f2ae655ebe0fa6560014208edb4b99a6ee73e2afb8eaddbec28aa9bfdef49111.exe"C:\Users\Admin\AppData\Local\Temp\f2ae655ebe0fa6560014208edb4b99a6ee73e2afb8eaddbec28aa9bfdef49111.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:668