Analysis
-
max time kernel
10s -
max time network
46s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
05/12/2022, 08:00
Static task
static1
Behavioral task
behavioral1
Sample
68cbde5044115d7472f8df1b3ab5a243452fc2763bc9ca76edb007d1966eeb5e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
68cbde5044115d7472f8df1b3ab5a243452fc2763bc9ca76edb007d1966eeb5e.exe
Resource
win10v2004-20221111-en
General
-
Target
68cbde5044115d7472f8df1b3ab5a243452fc2763bc9ca76edb007d1966eeb5e.exe
-
Size
641KB
-
MD5
e616afcd8fb51a5db3b7e7d58e8f851d
-
SHA1
6adbd3363db6e9295b419f276cda026e61a4da48
-
SHA256
68cbde5044115d7472f8df1b3ab5a243452fc2763bc9ca76edb007d1966eeb5e
-
SHA512
f9f647f11f2db5584c1187e33f997d13d648b27cc9a39bbd760d76221e24255fb949d5a84063fa617016fe95a4f4e8058e883c600406d35565f4b1e42b95700e
-
SSDEEP
12288:NJjVmcOlfr7rTu/fvjL3FP+PTmMWjXBdd7h32/wKCoBWeokxcrB1IRTHRHab:NJjVdQrfTu/frhmPTmMqdHm4KVBWe/Kv
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 900 68cbde5044115d7472f8df1b3ab5a243452fc2763bc9ca76edb007d1966eeb5e.exe -
Suspicious use of SetWindowsHookEx 5 IoCs
pid Process 900 68cbde5044115d7472f8df1b3ab5a243452fc2763bc9ca76edb007d1966eeb5e.exe 900 68cbde5044115d7472f8df1b3ab5a243452fc2763bc9ca76edb007d1966eeb5e.exe 900 68cbde5044115d7472f8df1b3ab5a243452fc2763bc9ca76edb007d1966eeb5e.exe 900 68cbde5044115d7472f8df1b3ab5a243452fc2763bc9ca76edb007d1966eeb5e.exe 900 68cbde5044115d7472f8df1b3ab5a243452fc2763bc9ca76edb007d1966eeb5e.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\68cbde5044115d7472f8df1b3ab5a243452fc2763bc9ca76edb007d1966eeb5e.exe"C:\Users\Admin\AppData\Local\Temp\68cbde5044115d7472f8df1b3ab5a243452fc2763bc9ca76edb007d1966eeb5e.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:900