Analysis
-
max time kernel
210s -
max time network
217s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
01-12-2022 21:35
Static task
static1
Behavioral task
behavioral1
Sample
e56d1c1b53c470e501562223d9ee36c1299811e023814d25eb1d33e9164ee0ec.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e56d1c1b53c470e501562223d9ee36c1299811e023814d25eb1d33e9164ee0ec.exe
Resource
win10v2004-20221111-en
General
-
Target
e56d1c1b53c470e501562223d9ee36c1299811e023814d25eb1d33e9164ee0ec.exe
-
Size
8.6MB
-
MD5
69bfceafcf256ec9016e38a01ca4d867
-
SHA1
5a1a7cb8e5cf30252f9b05dac26f247cc9308aa4
-
SHA256
e56d1c1b53c470e501562223d9ee36c1299811e023814d25eb1d33e9164ee0ec
-
SHA512
41eec3fe37724e5bad34247788b29c7fe9b4518d5791cc48ad3833fb67002446516b170c8a01fb275685a583ccbcc1d0ffbf61d972b6d0d908fb9c44c8951795
-
SSDEEP
196608:gBIco+5Yg+uWVptazHRIEgzmDVG3dEBZaqyZS17wNgf0GlLiH4:m5YgPW1azBxlW/mf0GxiH4
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 220 e56d1c1b53c470e501562223d9ee36c1299811e023814d25eb1d33e9164ee0ec.exe 220 e56d1c1b53c470e501562223d9ee36c1299811e023814d25eb1d33e9164ee0ec.exe 220 e56d1c1b53c470e501562223d9ee36c1299811e023814d25eb1d33e9164ee0ec.exe 220 e56d1c1b53c470e501562223d9ee36c1299811e023814d25eb1d33e9164ee0ec.exe 220 e56d1c1b53c470e501562223d9ee36c1299811e023814d25eb1d33e9164ee0ec.exe 220 e56d1c1b53c470e501562223d9ee36c1299811e023814d25eb1d33e9164ee0ec.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 220 e56d1c1b53c470e501562223d9ee36c1299811e023814d25eb1d33e9164ee0ec.exe 220 e56d1c1b53c470e501562223d9ee36c1299811e023814d25eb1d33e9164ee0ec.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\e56d1c1b53c470e501562223d9ee36c1299811e023814d25eb1d33e9164ee0ec.exe"C:\Users\Admin\AppData\Local\Temp\e56d1c1b53c470e501562223d9ee36c1299811e023814d25eb1d33e9164ee0ec.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:220