Analysis
-
max time kernel
146s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
01-12-2022 02:55
Static task
static1
Behavioral task
behavioral1
Sample
7aff487330c9e460cad8af3cd7ca094f3f420db59ff9519dedcf210788edee25.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7aff487330c9e460cad8af3cd7ca094f3f420db59ff9519dedcf210788edee25.exe
Resource
win10v2004-20220812-en
General
-
Target
7aff487330c9e460cad8af3cd7ca094f3f420db59ff9519dedcf210788edee25.exe
-
Size
5.0MB
-
MD5
c55a0e9c693f62dc4af9cb765cf255b1
-
SHA1
37bbd75968acae96764c5e6e6ccd5a67f071f440
-
SHA256
7aff487330c9e460cad8af3cd7ca094f3f420db59ff9519dedcf210788edee25
-
SHA512
bd0fa43a086a77aee5f5c115218afb7115c0c070ad93a1e70f50f69bc8b71d7bc1f46e24f67b376e87bc96c6ea39498ed888bfc301594a7367ee8260b8c5eb5c
-
SSDEEP
98304:8opMGLh/r8XCQX9rZ703asdzrPVgpuHiwt2t12:8pG9/KduJ5NgpsiHS
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 1716 7aff487330c9e460cad8af3cd7ca094f3f420db59ff9519dedcf210788edee25.exe 1716 7aff487330c9e460cad8af3cd7ca094f3f420db59ff9519dedcf210788edee25.exe 1716 7aff487330c9e460cad8af3cd7ca094f3f420db59ff9519dedcf210788edee25.exe 1716 7aff487330c9e460cad8af3cd7ca094f3f420db59ff9519dedcf210788edee25.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1716 7aff487330c9e460cad8af3cd7ca094f3f420db59ff9519dedcf210788edee25.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\7aff487330c9e460cad8af3cd7ca094f3f420db59ff9519dedcf210788edee25.exe"C:\Users\Admin\AppData\Local\Temp\7aff487330c9e460cad8af3cd7ca094f3f420db59ff9519dedcf210788edee25.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:1716