Analysis
-
max time kernel
165s -
max time network
136s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
03-12-2022 18:35
Behavioral task
behavioral1
Sample
064679f9064c4b9feee88d8bb261cfa97b93c5ff67fe238803f051057485caa4.exe
Resource
win7-20220812-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
064679f9064c4b9feee88d8bb261cfa97b93c5ff67fe238803f051057485caa4.exe
Resource
win10v2004-20221111-en
windows10-2004-x64
4 signatures
150 seconds
General
-
Target
064679f9064c4b9feee88d8bb261cfa97b93c5ff67fe238803f051057485caa4.exe
-
Size
1.7MB
-
MD5
e88901f25a88238f741675bcae5c50db
-
SHA1
160f50bedb39adc6f70686870437173fdaf5b217
-
SHA256
064679f9064c4b9feee88d8bb261cfa97b93c5ff67fe238803f051057485caa4
-
SHA512
81394842e45ca617ef59b52f80c91fa7c32a77edcb1eea83a8d304d3f56ddc3ffae654feb712d95b57a64b52aa67d6dc1d74d7ade431d320ee0d5d980a9e02f4
-
SSDEEP
49152:oVnRy4JdOyOXoIwhY5fnoG9rrmfCat5sajUy:oVnRyMQX6ofHOqUP
Score
1/10
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3845472200-3839195424-595303356-1000\Software\Microsoft\Internet Explorer\Main 064679f9064c4b9feee88d8bb261cfa97b93c5ff67fe238803f051057485caa4.exe -
Suspicious behavior: EnumeratesProcesses 12 IoCs
pid Process 1096 064679f9064c4b9feee88d8bb261cfa97b93c5ff67fe238803f051057485caa4.exe 1096 064679f9064c4b9feee88d8bb261cfa97b93c5ff67fe238803f051057485caa4.exe 1096 064679f9064c4b9feee88d8bb261cfa97b93c5ff67fe238803f051057485caa4.exe 1096 064679f9064c4b9feee88d8bb261cfa97b93c5ff67fe238803f051057485caa4.exe 1096 064679f9064c4b9feee88d8bb261cfa97b93c5ff67fe238803f051057485caa4.exe 1096 064679f9064c4b9feee88d8bb261cfa97b93c5ff67fe238803f051057485caa4.exe 1096 064679f9064c4b9feee88d8bb261cfa97b93c5ff67fe238803f051057485caa4.exe 1096 064679f9064c4b9feee88d8bb261cfa97b93c5ff67fe238803f051057485caa4.exe 1096 064679f9064c4b9feee88d8bb261cfa97b93c5ff67fe238803f051057485caa4.exe 1096 064679f9064c4b9feee88d8bb261cfa97b93c5ff67fe238803f051057485caa4.exe 1096 064679f9064c4b9feee88d8bb261cfa97b93c5ff67fe238803f051057485caa4.exe 1096 064679f9064c4b9feee88d8bb261cfa97b93c5ff67fe238803f051057485caa4.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1096 064679f9064c4b9feee88d8bb261cfa97b93c5ff67fe238803f051057485caa4.exe 1096 064679f9064c4b9feee88d8bb261cfa97b93c5ff67fe238803f051057485caa4.exe 1096 064679f9064c4b9feee88d8bb261cfa97b93c5ff67fe238803f051057485caa4.exe 1096 064679f9064c4b9feee88d8bb261cfa97b93c5ff67fe238803f051057485caa4.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\064679f9064c4b9feee88d8bb261cfa97b93c5ff67fe238803f051057485caa4.exe"C:\Users\Admin\AppData\Local\Temp\064679f9064c4b9feee88d8bb261cfa97b93c5ff67fe238803f051057485caa4.exe"1⤵
- Modifies Internet Explorer settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:1096