Analysis
-
max time kernel
199s -
max time network
209s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
01/12/2022, 10:51
General
-
Target
f15c2c10a00b07930d14c6f1cbeddc1b01bc75f5fa99c8cdaf6e4055082a99a4.exe
-
Size
1.1MB
-
MD5
21ad9d8e96700619ef6d3a5617ddbdc7
-
SHA1
8eff9f23333cd35801a11acf811d25fa2db7d992
-
SHA256
f15c2c10a00b07930d14c6f1cbeddc1b01bc75f5fa99c8cdaf6e4055082a99a4
-
SHA512
b3c788b808ae2b84a8b63c4cc35127ded00236c033cfb9aefeacca84df40fe9ada351178b9cfa41bc480acffe4fb5d81bef3c4825c4b7259a544901697c4311d
-
SSDEEP
24576:+7gZ14fcXbZcsVX71rPMGpkyR4wPcf1j22G:+RwdX71z6SaV22G
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious behavior: LoadsDriver 2 IoCs
-
Suspicious use of SetWindowsHookEx 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f15c2c10a00b07930d14c6f1cbeddc1b01bc75f5fa99c8cdaf6e4055082a99a4.exe"C:\Users\Admin\AppData\Local\Temp\f15c2c10a00b07930d14c6f1cbeddc1b01bc75f5fa99c8cdaf6e4055082a99a4.exe"1⤵
- Drops file in System32 directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx