Analysis
-
max time kernel
150s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
02-12-2022 17:49
Static task
static1
Behavioral task
behavioral1
Sample
a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe
Resource
win10v2004-20220901-en
General
-
Target
a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe
-
Size
1.0MB
-
MD5
b378f630f81b7a91eb01f6d12ce75b3a
-
SHA1
37504951ff02f243ca60d47e054fecfe30349d90
-
SHA256
a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58
-
SHA512
0035cecaead0f7a42684a85f047b7cc85777bcec780dbe93f5a9c5b53cfc460a385bc9e7da7c1e3aa775fd1dd75482418053b3ca0f2f75bb1b5762e789a3b1fc
-
SSDEEP
24576:h4eHzYfE2GmW7uPyIOb8FEZ/e8dw8nhr2+nFHTEd:NUfE2utIi2EZW8O8c+nFHTEd
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 46 IoCs
pid Process 2016 a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe 2016 a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe 2016 a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe 2016 a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe 2016 a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe 2016 a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe 2016 a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe 2016 a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe 2016 a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe 2016 a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe 2016 a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe 2016 a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe 2016 a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe 2016 a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe 2016 a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe 2016 a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe 2016 a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe 2016 a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe 2016 a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe 2016 a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe 2016 a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe 2016 a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe 2016 a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe 2016 a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe 2016 a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe 2016 a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe 2016 a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe 2016 a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe 2016 a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe 2016 a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe 2016 a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe 2016 a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe 2016 a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe 2016 a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe 2016 a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe 2016 a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe 2016 a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe 2016 a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe 2016 a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe 2016 a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe 2016 a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe 2016 a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe 2016 a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe 2016 a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe 2016 a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe 2016 a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2016 a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe 2016 a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe 2016 a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe"C:\Users\Admin\AppData\Local\Temp\a277df2b13fa15a8415dd65312f93046f1228f22a7deff029d3bbd3e507b0b58.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:2016