Analysis
-
max time kernel
48s -
max time network
52s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system -
submitted
27-11-2022 15:57
Static task
static1
Behavioral task
behavioral1
Sample
6011db613f744e24b55ea57d5e4d405264a709de5bf57ccb9a686885c6f7142b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6011db613f744e24b55ea57d5e4d405264a709de5bf57ccb9a686885c6f7142b.exe
Resource
win10v2004-20220812-en
General
-
Target
6011db613f744e24b55ea57d5e4d405264a709de5bf57ccb9a686885c6f7142b.exe
-
Size
400KB
-
MD5
bc8f6962848748a485334874bd7df96f
-
SHA1
9171e97d39f949632c623c570907da2b8cce5d6a
-
SHA256
6011db613f744e24b55ea57d5e4d405264a709de5bf57ccb9a686885c6f7142b
-
SHA512
dab614b794de5c99535bc20aec14e7a6bf5613c79c1f8bd83dbe3b76192f95c28559a7f3d70f97146d867f609f38076f82e17ff93faa823cc4e40256fa8f0a5b
-
SSDEEP
12288:OEdn0YCMKwUJHvzD3zJpxJY/X5qzSYcKPB9dS:hF0YOhDgYgKzdS
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes:
6011db613f744e24b55ea57d5e4d405264a709de5bf57ccb9a686885c6f7142b.exepid process 1376 6011db613f744e24b55ea57d5e4d405264a709de5bf57ccb9a686885c6f7142b.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
6011db613f744e24b55ea57d5e4d405264a709de5bf57ccb9a686885c6f7142b.exepid process 1376 6011db613f744e24b55ea57d5e4d405264a709de5bf57ccb9a686885c6f7142b.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\6011db613f744e24b55ea57d5e4d405264a709de5bf57ccb9a686885c6f7142b.exe"C:\Users\Admin\AppData\Local\Temp\6011db613f744e24b55ea57d5e4d405264a709de5bf57ccb9a686885c6f7142b.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:1376