Analysis
-
max time kernel
227s -
max time network
336s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system -
submitted
03/12/2022, 18:28
Static task
static1
Behavioral task
behavioral1
Sample
032a9a8cb6f5cf2509a1397b3406ea204341924aca38c0f11fe9b25318070c5d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
032a9a8cb6f5cf2509a1397b3406ea204341924aca38c0f11fe9b25318070c5d.exe
Resource
win10v2004-20220812-en
General
-
Target
032a9a8cb6f5cf2509a1397b3406ea204341924aca38c0f11fe9b25318070c5d.exe
-
Size
618KB
-
MD5
12e97b58a0498425781e36f738990eed
-
SHA1
b34d843948112e84cb027455e5acfcc53e94cf69
-
SHA256
032a9a8cb6f5cf2509a1397b3406ea204341924aca38c0f11fe9b25318070c5d
-
SHA512
b0bb16e6077c028ff0808d3d3f4af02c210b014b1e6d8172cd0a01ada32e3b3831a35b36ae5f5535c982635e6de8dbf50a8ffaa36e1cbcdd721923917feb9423
-
SSDEEP
12288:FJ7tf5MmUClWFsTeRcTB0vYgkjoD6Lmz8UOZaXvJh3dMX41uS4ZGNId2fQDceiDT:FJRf5hUCxeRMeQgGoOuma/Jh3qXUujZo
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 564 032a9a8cb6f5cf2509a1397b3406ea204341924aca38c0f11fe9b25318070c5d.exe -
Suspicious use of SetWindowsHookEx 5 IoCs
pid Process 564 032a9a8cb6f5cf2509a1397b3406ea204341924aca38c0f11fe9b25318070c5d.exe 564 032a9a8cb6f5cf2509a1397b3406ea204341924aca38c0f11fe9b25318070c5d.exe 564 032a9a8cb6f5cf2509a1397b3406ea204341924aca38c0f11fe9b25318070c5d.exe 564 032a9a8cb6f5cf2509a1397b3406ea204341924aca38c0f11fe9b25318070c5d.exe 564 032a9a8cb6f5cf2509a1397b3406ea204341924aca38c0f11fe9b25318070c5d.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\032a9a8cb6f5cf2509a1397b3406ea204341924aca38c0f11fe9b25318070c5d.exe"C:\Users\Admin\AppData\Local\Temp\032a9a8cb6f5cf2509a1397b3406ea204341924aca38c0f11fe9b25318070c5d.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:564