Analysis
-
max time kernel
3s -
max time network
34s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system -
submitted
05/12/2022, 06:15
Static task
static1
Behavioral task
behavioral1
Sample
c072bc520e3025064ff9f71cd2a26b3e69247df6d32bf579eb6402657b1aa305.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c072bc520e3025064ff9f71cd2a26b3e69247df6d32bf579eb6402657b1aa305.exe
Resource
win10v2004-20220901-en
General
-
Target
c072bc520e3025064ff9f71cd2a26b3e69247df6d32bf579eb6402657b1aa305.exe
-
Size
378KB
-
MD5
8e569090a47ed599ba079379a4df513a
-
SHA1
b3d6e94cd8aec04210ac07e50d838d8517cea686
-
SHA256
c072bc520e3025064ff9f71cd2a26b3e69247df6d32bf579eb6402657b1aa305
-
SHA512
e2a4c84739c9a84ace3b7bf46a55db42a476c9cdbac095a07a8039fc0bb348570b5d8298c9698527cded1be439a31d2a35cf042897a332cf71386b5f7babec57
-
SSDEEP
6144:VISq09lkVdFnkm9dgfkuw+CnDhV6emHQ2XIqaIRVLIc6aA8vKkLRLNYNzfNSLi:eElkz2mYkuQr6eqQ2YYt9vKkLAzf0m
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 948 c072bc520e3025064ff9f71cd2a26b3e69247df6d32bf579eb6402657b1aa305.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 948 c072bc520e3025064ff9f71cd2a26b3e69247df6d32bf579eb6402657b1aa305.exe 948 c072bc520e3025064ff9f71cd2a26b3e69247df6d32bf579eb6402657b1aa305.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\c072bc520e3025064ff9f71cd2a26b3e69247df6d32bf579eb6402657b1aa305.exe"C:\Users\Admin\AppData\Local\Temp\c072bc520e3025064ff9f71cd2a26b3e69247df6d32bf579eb6402657b1aa305.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:948