Analysis
-
max time kernel
150s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
27-11-2022 05:08
Static task
static1
Behavioral task
behavioral1
Sample
c9c567125c082ed6d6812cd7e6bb5ee8ff372003b4958b29ebd80fc1d3e4fb7f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c9c567125c082ed6d6812cd7e6bb5ee8ff372003b4958b29ebd80fc1d3e4fb7f.exe
Resource
win10v2004-20221111-en
General
-
Target
c9c567125c082ed6d6812cd7e6bb5ee8ff372003b4958b29ebd80fc1d3e4fb7f.exe
-
Size
92KB
-
MD5
4ee7f6e371ba36c068cee79980172780
-
SHA1
7b4db3c51cb0c0fc01209f012fa6db29ab960ddb
-
SHA256
c9c567125c082ed6d6812cd7e6bb5ee8ff372003b4958b29ebd80fc1d3e4fb7f
-
SHA512
90af3db9664cc66332801f62dd50bae2bda0df879f26c5d5af23ce89f10277dea282c83cb8e9f41a99a4ddea1a247123ce757fb294b0a1d44acfdb95a1070244
-
SSDEEP
768:8JC6gYHQIpKLSThRE88ojdaWMhGW02NuB0E5bCbiFnVuIbv0VbJKmjVWlFp9wpOg:8h/UWEojdaWBW0bID2Fp9ww6rx/
Malware Config
Signatures
-
Script User-Agent 1 IoCs
Uses user-agent string associated with script host/environment.
description flow ioc HTTP User-Agent header 17 Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 4400 c9c567125c082ed6d6812cd7e6bb5ee8ff372003b4958b29ebd80fc1d3e4fb7f.exe 4400 c9c567125c082ed6d6812cd7e6bb5ee8ff372003b4958b29ebd80fc1d3e4fb7f.exe 4400 c9c567125c082ed6d6812cd7e6bb5ee8ff372003b4958b29ebd80fc1d3e4fb7f.exe