Analysis
-
max time kernel
91s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
01/12/2022, 08:25
Static task
static1
Behavioral task
behavioral1
Sample
b70892d1054a6898b33eb2812f09debedef8c246e948bc5fbafdd3bb0fcdb96d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b70892d1054a6898b33eb2812f09debedef8c246e948bc5fbafdd3bb0fcdb96d.exe
Resource
win10v2004-20220901-en
General
-
Target
b70892d1054a6898b33eb2812f09debedef8c246e948bc5fbafdd3bb0fcdb96d.exe
-
Size
17.7MB
-
MD5
7e3a38c6c7017bfc2618b4d76d583f2f
-
SHA1
aae7b6ec592144a0874aa8a7197707a03c8552e4
-
SHA256
b70892d1054a6898b33eb2812f09debedef8c246e948bc5fbafdd3bb0fcdb96d
-
SHA512
cf79c608541beaed63b7d9276043eebf1c8a25a252c777352cf2dc12a1bcf23981c4e15c507e7cf5ea273a69e790f343eaf09975d5ec24a663a2ee4a78ebda8d
-
SSDEEP
393216:BSu9gJH6Phg2cCw7Vj7tYR3lcqnKfHUR8b8VlClfDC5qsPv/R:gu6H6PC2Na8u/lb+CluQ4h
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 1316 b70892d1054a6898b33eb2812f09debedef8c246e948bc5fbafdd3bb0fcdb96d.exe 1316 b70892d1054a6898b33eb2812f09debedef8c246e948bc5fbafdd3bb0fcdb96d.exe 1316 b70892d1054a6898b33eb2812f09debedef8c246e948bc5fbafdd3bb0fcdb96d.exe 1316 b70892d1054a6898b33eb2812f09debedef8c246e948bc5fbafdd3bb0fcdb96d.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1316 b70892d1054a6898b33eb2812f09debedef8c246e948bc5fbafdd3bb0fcdb96d.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\b70892d1054a6898b33eb2812f09debedef8c246e948bc5fbafdd3bb0fcdb96d.exe"C:\Users\Admin\AppData\Local\Temp\b70892d1054a6898b33eb2812f09debedef8c246e948bc5fbafdd3bb0fcdb96d.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:1316