Analysis
-
max time kernel
40s -
max time network
45s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
29/11/2022, 14:37
Static task
static1
Behavioral task
behavioral1
Sample
ed83cb1a01c3ba9e3c650b5a1962e9a743d54ba935641a8f3c672ce1567416cb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ed83cb1a01c3ba9e3c650b5a1962e9a743d54ba935641a8f3c672ce1567416cb.exe
Resource
win10v2004-20220812-en
General
-
Target
ed83cb1a01c3ba9e3c650b5a1962e9a743d54ba935641a8f3c672ce1567416cb.exe
-
Size
303KB
-
MD5
88a622831e928d9844aaf3b2294e3260
-
SHA1
fb438efeef797be05fca500816aa7a64790b420b
-
SHA256
ed83cb1a01c3ba9e3c650b5a1962e9a743d54ba935641a8f3c672ce1567416cb
-
SHA512
44468252ed00ce081aa48f804000b157c882a29dad4e23a3850cdf63c335c8f9ce269dfba4461cf1c5643e288c306d65d4d0d09ae762e59bbbe59e81d2279d5e
-
SSDEEP
6144:nAno6EVbLOMpjgx9tTeKUuIYiiP99/ccxYYszjJGBC4v5:VNVGMRgLtTerYiiPxYYsIj5
Malware Config
Signatures
-
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.key ed83cb1a01c3ba9e3c650b5a1962e9a743d54ba935641a8f3c672ce1567416cb.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.key\ = "regfile" ed83cb1a01c3ba9e3c650b5a1962e9a743d54ba935641a8f3c672ce1567416cb.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1248 ed83cb1a01c3ba9e3c650b5a1962e9a743d54ba935641a8f3c672ce1567416cb.exe