Analysis
-
max time kernel
204s -
max time network
244s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
05-12-2022 19:46
Static task
static1
Behavioral task
behavioral1
Sample
7c739fa91e6cad781079d2e7f636645cbd70697bc98d2d8b56eea07488600ed0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7c739fa91e6cad781079d2e7f636645cbd70697bc98d2d8b56eea07488600ed0.exe
Resource
win10v2004-20221111-en
General
-
Target
7c739fa91e6cad781079d2e7f636645cbd70697bc98d2d8b56eea07488600ed0.exe
-
Size
292KB
-
MD5
6bd26a8f7236472203d66c91d42c186b
-
SHA1
50331ef8360e475ceec6b1812e0d959505dbf46d
-
SHA256
7c739fa91e6cad781079d2e7f636645cbd70697bc98d2d8b56eea07488600ed0
-
SHA512
ed6f1c7f0d9898374bfc8b4a083632c76a16b5079cec466250cef8fc0a0e405708597440f92e684b1c56e50903bdbf77d88580f860007e0eb58c872f0c8bac95
-
SSDEEP
6144:lXQGIBS9U0SpJ4Ht1n4Jvmj22DxE/uNx90AMAeQNpcwW4Tg:loc9yC7naej22i/uNx90AMAzW48
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 3480 7c739fa91e6cad781079d2e7f636645cbd70697bc98d2d8b56eea07488600ed0.exe 3480 7c739fa91e6cad781079d2e7f636645cbd70697bc98d2d8b56eea07488600ed0.exe 3480 7c739fa91e6cad781079d2e7f636645cbd70697bc98d2d8b56eea07488600ed0.exe 3480 7c739fa91e6cad781079d2e7f636645cbd70697bc98d2d8b56eea07488600ed0.exe 3480 7c739fa91e6cad781079d2e7f636645cbd70697bc98d2d8b56eea07488600ed0.exe 3480 7c739fa91e6cad781079d2e7f636645cbd70697bc98d2d8b56eea07488600ed0.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3480 7c739fa91e6cad781079d2e7f636645cbd70697bc98d2d8b56eea07488600ed0.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\7c739fa91e6cad781079d2e7f636645cbd70697bc98d2d8b56eea07488600ed0.exe"C:\Users\Admin\AppData\Local\Temp\7c739fa91e6cad781079d2e7f636645cbd70697bc98d2d8b56eea07488600ed0.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:3480