Analysis
-
max time kernel
184s -
max time network
195s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
01-12-2022 00:58
Static task
static1
Behavioral task
behavioral1
Sample
8f18d7b98022221c04efba5b88eac149f3482a66f4180db058036d8bd8c3e297.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8f18d7b98022221c04efba5b88eac149f3482a66f4180db058036d8bd8c3e297.exe
Resource
win10v2004-20220812-en
General
-
Target
8f18d7b98022221c04efba5b88eac149f3482a66f4180db058036d8bd8c3e297.exe
-
Size
19.9MB
-
MD5
ad6ffa41882c93055b7fd1e5b303c6d2
-
SHA1
15fa7e9397a9088cdae830057c0fbca67203af11
-
SHA256
8f18d7b98022221c04efba5b88eac149f3482a66f4180db058036d8bd8c3e297
-
SHA512
88c80183105d43a449e35b0d2ba86a8670306fb14e615271dc9ddf13f51e0f04ffa99282aaa512a4c482b86136d261e315de89c2fa224f866940443772bfc597
-
SSDEEP
393216:YAPpXAnwICAqEOTBx70fMFZ79/BGmCQqlYNTZ+W501Ymz:b2sA4zgM3GvlYNsErmz
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 3816 8f18d7b98022221c04efba5b88eac149f3482a66f4180db058036d8bd8c3e297.exe 3816 8f18d7b98022221c04efba5b88eac149f3482a66f4180db058036d8bd8c3e297.exe 3816 8f18d7b98022221c04efba5b88eac149f3482a66f4180db058036d8bd8c3e297.exe 3816 8f18d7b98022221c04efba5b88eac149f3482a66f4180db058036d8bd8c3e297.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3816 8f18d7b98022221c04efba5b88eac149f3482a66f4180db058036d8bd8c3e297.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\8f18d7b98022221c04efba5b88eac149f3482a66f4180db058036d8bd8c3e297.exe"C:\Users\Admin\AppData\Local\Temp\8f18d7b98022221c04efba5b88eac149f3482a66f4180db058036d8bd8c3e297.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:3816