Analysis
-
max time kernel
180s -
max time network
208s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
03-12-2022 17:50
Static task
static1
Behavioral task
behavioral1
Sample
a537f1608646153660785ebdfac5c4f9629f053b2fd8d90f1cf6cf2a3118750f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a537f1608646153660785ebdfac5c4f9629f053b2fd8d90f1cf6cf2a3118750f.exe
Resource
win10v2004-20221111-en
General
-
Target
a537f1608646153660785ebdfac5c4f9629f053b2fd8d90f1cf6cf2a3118750f.exe
-
Size
404KB
-
MD5
16bbd500fd439e1c86c8bdb8b7582183
-
SHA1
555da0a8cc8f6afff35538ea1549bf2cdcead141
-
SHA256
a537f1608646153660785ebdfac5c4f9629f053b2fd8d90f1cf6cf2a3118750f
-
SHA512
465b587cb19a4cc1df0c0928ca4e666143a3f273a1c771ea407e64953a85aa60a0169d42176644b178437f695a039c0d89991ea21c8007b71d61e2b38efeba4e
-
SSDEEP
6144:tzrFK33TY/rFN17DIZ4hoPTiXC5elBJTTQ1af0DhRJtCbMTZDV/FQp+ZZW8Heff5:tzrFK36y8TVctCY3FQ2
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 320 a537f1608646153660785ebdfac5c4f9629f053b2fd8d90f1cf6cf2a3118750f.exe 320 a537f1608646153660785ebdfac5c4f9629f053b2fd8d90f1cf6cf2a3118750f.exe 320 a537f1608646153660785ebdfac5c4f9629f053b2fd8d90f1cf6cf2a3118750f.exe 320 a537f1608646153660785ebdfac5c4f9629f053b2fd8d90f1cf6cf2a3118750f.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 320 a537f1608646153660785ebdfac5c4f9629f053b2fd8d90f1cf6cf2a3118750f.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\a537f1608646153660785ebdfac5c4f9629f053b2fd8d90f1cf6cf2a3118750f.exe"C:\Users\Admin\AppData\Local\Temp\a537f1608646153660785ebdfac5c4f9629f053b2fd8d90f1cf6cf2a3118750f.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:320