Analysis
-
max time kernel
37s -
max time network
90s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
04/12/2022, 04:37
Static task
static1
Behavioral task
behavioral1
Sample
cd467af84eff64a4a858edbca8f862f360ba3ac26a11c6fe7e338a9bb230d314.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cd467af84eff64a4a858edbca8f862f360ba3ac26a11c6fe7e338a9bb230d314.exe
Resource
win10v2004-20220812-en
General
-
Target
cd467af84eff64a4a858edbca8f862f360ba3ac26a11c6fe7e338a9bb230d314.exe
-
Size
108KB
-
MD5
416f4ebc635836766d1d903fd0294a7b
-
SHA1
1455c93998676b2f145e97dafe226df8dba19fe1
-
SHA256
cd467af84eff64a4a858edbca8f862f360ba3ac26a11c6fe7e338a9bb230d314
-
SHA512
d31ad6818bafadbb3cdd66a8f02da8f0fee9c80735ebcbc557821de8258d28991f071bbb650fb05a605cb9113384a8985d21a004c19464a8ec69d9d4afe679c5
-
SSDEEP
1536:wFSH0KLQ33EN53wh5CNX6dsEIyq/C91pSLDbxOiELP:b03325ASX6sEIw/7
Malware Config
Signatures
-
Script User-Agent 1 IoCs
Uses user-agent string associated with script host/environment.
description flow ioc HTTP User-Agent header 3 Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1648 cd467af84eff64a4a858edbca8f862f360ba3ac26a11c6fe7e338a9bb230d314.exe