Analysis
- max time kernel
210s - max time network
217s - platform
windows10-2004_x64 - resource
win10v2004-20221111-en - resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system - submitted
01/12/2022, 21:35
Static task
static1
Behavioral task
behavioral1
Sample
e56d1c1b53c470e501562223d9ee36c1299811e023814d25eb1d33e9164ee0ec.exe
Resource
win7-20220812-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
e56d1c1b53c470e501562223d9ee36c1299811e023814d25eb1d33e9164ee0ec.exe
Resource
win10v2004-20221111-en
2 signatures
150 seconds
General
- Target e56d1c1b53c470e501562223d9ee36c1299811e023814d25eb1d33e9164ee0ec.exe
- Size 8.6MB
- Sample221201-1fsa6adb35
- SHA256 e56d1c1b53c470e501562223d9ee36c1299811e023814d25eb1d33e9164ee0ec
- MD5 69bfceafcf256ec9016e38a01ca4d867
- SHA1 5a1a7cb8e5cf30252f9b05dac26f247cc9308aa4
- SHA512 41eec3fe37724e5bad34247788b29c7fe9b4518d5791cc48ad3833fb67002446516b170c8a01fb275685a583ccbcc1d0ffbf61d972b6d0d908fb9c44c8951795
- SSDEEP 196608:gBIco+5Yg+uWVptazHRIEgzmDVG3dEBZaqyZS17wNgf0GlLiH4:m5YgPW1azBxlW/mf0GxiH4
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 220 e56d1c1b53c470e501562223d9ee36c1299811e023814d25eb1d33e9164ee0ec.exe 220 e56d1c1b53c470e501562223d9ee36c1299811e023814d25eb1d33e9164ee0ec.exe 220 e56d1c1b53c470e501562223d9ee36c1299811e023814d25eb1d33e9164ee0ec.exe 220 e56d1c1b53c470e501562223d9ee36c1299811e023814d25eb1d33e9164ee0ec.exe 220 e56d1c1b53c470e501562223d9ee36c1299811e023814d25eb1d33e9164ee0ec.exe 220 e56d1c1b53c470e501562223d9ee36c1299811e023814d25eb1d33e9164ee0ec.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 220 e56d1c1b53c470e501562223d9ee36c1299811e023814d25eb1d33e9164ee0ec.exe 220 e56d1c1b53c470e501562223d9ee36c1299811e023814d25eb1d33e9164ee0ec.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\e56d1c1b53c470e501562223d9ee36c1299811e023814d25eb1d33e9164ee0ec.exe"C:\Users\Admin\AppData\Local\Temp\e56d1c1b53c470e501562223d9ee36c1299811e023814d25eb1d33e9164ee0ec.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:220