Analysis
-
max time kernel
46s -
max time network
113s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system -
submitted
02-12-2022 00:53
Static task
static1
Behavioral task
behavioral1
Sample
12e039b78059414639cee5aade94aa602a4fa1860a3fdc7a1a9d0c7bff20378b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
12e039b78059414639cee5aade94aa602a4fa1860a3fdc7a1a9d0c7bff20378b.exe
Resource
win10v2004-20220812-en
General
-
Target
12e039b78059414639cee5aade94aa602a4fa1860a3fdc7a1a9d0c7bff20378b.exe
-
Size
10.8MB
-
MD5
729c4109b22489ccbb40e370fa94321b
-
SHA1
7f7a6f8c1e79e5a102d1ebae43eac79820acb70a
-
SHA256
12e039b78059414639cee5aade94aa602a4fa1860a3fdc7a1a9d0c7bff20378b
-
SHA512
0b7a51031a6c234c0a8f8d34497212542d03ea22583d6a697bdb48ac83f3b7ec07e1a2c61d1aca34d7cee4379d6faf33735ab86fedee0f996d48b15b3caefd0f
-
SSDEEP
196608:OJCUYuCtpxkCd9kdJgUPaPlUEj0M8LWymBwaKBC4vLcv3BDDH28D3I4gV0rT:I/TzPcUEj0M8LWyt/Um23BvH28DY+T
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 3 IoCs
pid Process 1128 12e039b78059414639cee5aade94aa602a4fa1860a3fdc7a1a9d0c7bff20378b.exe 1128 12e039b78059414639cee5aade94aa602a4fa1860a3fdc7a1a9d0c7bff20378b.exe 1128 12e039b78059414639cee5aade94aa602a4fa1860a3fdc7a1a9d0c7bff20378b.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1128 12e039b78059414639cee5aade94aa602a4fa1860a3fdc7a1a9d0c7bff20378b.exe 1128 12e039b78059414639cee5aade94aa602a4fa1860a3fdc7a1a9d0c7bff20378b.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\12e039b78059414639cee5aade94aa602a4fa1860a3fdc7a1a9d0c7bff20378b.exe"C:\Users\Admin\AppData\Local\Temp\12e039b78059414639cee5aade94aa602a4fa1860a3fdc7a1a9d0c7bff20378b.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:1128