Analysis
-
max time kernel
43s -
max time network
48s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system -
submitted
02-12-2022 23:15
Behavioral task
behavioral1
Sample
99c311d01738a65a0c95985e7b97b534757acda3b662408bc37eecf0ce9c4fdf.exe
Resource
win7-20220901-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
99c311d01738a65a0c95985e7b97b534757acda3b662408bc37eecf0ce9c4fdf.exe
Resource
win10v2004-20220901-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
99c311d01738a65a0c95985e7b97b534757acda3b662408bc37eecf0ce9c4fdf.exe
-
Size
82KB
-
MD5
838bc3150f6e580b199a19a5144914f8
-
SHA1
381026365b0a8594df0cf1ac70b5594e52aafce2
-
SHA256
99c311d01738a65a0c95985e7b97b534757acda3b662408bc37eecf0ce9c4fdf
-
SHA512
1f2d51fc1b0f45d515e1ad16bb745907a25450cabe21d16656051266cdd78c87de748116bcc7c5d15f82ed272eb1b89938bf2bec602e04c3d3295345733ff0a1
-
SSDEEP
1536:Tc3u7F1e4zHvpad4WAwAEV5Q2yVgIXtA1IqDEbZWAz+Fqeyh0CjN+jQg:TsAzxad9DFxyGIe2UIZWS+5bCRg
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 620 99c311d01738a65a0c95985e7b97b534757acda3b662408bc37eecf0ce9c4fdf.exe -
Suspicious use of UnmapMainImage 1 IoCs
pid Process 620 99c311d01738a65a0c95985e7b97b534757acda3b662408bc37eecf0ce9c4fdf.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\99c311d01738a65a0c95985e7b97b534757acda3b662408bc37eecf0ce9c4fdf.exe"C:\Users\Admin\AppData\Local\Temp\99c311d01738a65a0c95985e7b97b534757acda3b662408bc37eecf0ce9c4fdf.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of UnmapMainImage
PID:620