Analysis
-
max time kernel
142s -
max time network
52s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system -
submitted
06/12/2022, 14:42
Behavioral task
behavioral1
Sample
9c7ab7988bf64d6d07df97da7d624936ac4c0ddab82b41488bc9e1250dd9f6a7.exe
Resource
win7-20220901-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
9c7ab7988bf64d6d07df97da7d624936ac4c0ddab82b41488bc9e1250dd9f6a7.exe
Resource
win10v2004-20220812-en
1 signatures
150 seconds
General
-
Target
9c7ab7988bf64d6d07df97da7d624936ac4c0ddab82b41488bc9e1250dd9f6a7.exe
-
Size
1.7MB
-
MD5
b9edccfd3b6c53c2323e283545eb3896
-
SHA1
346e09b816d07502433514bc298124c13b97b0c7
-
SHA256
9c7ab7988bf64d6d07df97da7d624936ac4c0ddab82b41488bc9e1250dd9f6a7
-
SHA512
206171f3f26f1fec46b4e6458790317073f4f298d547b1b76a591eb6218f515cbd75da297d7e8940fe90bc8c3785208aa54e49dcc41437e215c034bc29780882
-
SSDEEP
49152:uoq0qU8uA3bFLvryj8wZF1dbSiwjDg7I0eGZJdA:b2B3bxryjZSiMcM0S
Score
4/10
Malware Config
Signatures
-
Drops file in Windows directory 6 IoCs
description ioc Process File opened for modification C:\Windows\Installer\{AC76BA86-7AD7-1033-7B44-A90000000001}\PDXFile_8.ico 9c7ab7988bf64d6d07df97da7d624936ac4c0ddab82b41488bc9e1250dd9f6a7.exe File opened for modification C:\Windows\Installer\{AC76BA86-7AD7-1033-7B44-A90000000001}\RMFFile_8.ico 9c7ab7988bf64d6d07df97da7d624936ac4c0ddab82b41488bc9e1250dd9f6a7.exe File opened for modification C:\Windows\Installer\{AC76BA86-7AD7-1033-7B44-A90000000001}\SecStoreFile.ico 9c7ab7988bf64d6d07df97da7d624936ac4c0ddab82b41488bc9e1250dd9f6a7.exe File opened for modification C:\Windows\Installer\{AC76BA86-7AD7-1033-7B44-A90000000001}\XDPFile_8.ico 9c7ab7988bf64d6d07df97da7d624936ac4c0ddab82b41488bc9e1250dd9f6a7.exe File opened for modification C:\Windows\Installer\{AC76BA86-7AD7-1033-7B44-A90000000001}\APIFile_8.ico 9c7ab7988bf64d6d07df97da7d624936ac4c0ddab82b41488bc9e1250dd9f6a7.exe File opened for modification C:\Windows\Installer\{AC76BA86-7AD7-1033-7B44-A90000000001}\FDFFile_8.ico 9c7ab7988bf64d6d07df97da7d624936ac4c0ddab82b41488bc9e1250dd9f6a7.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1460 9c7ab7988bf64d6d07df97da7d624936ac4c0ddab82b41488bc9e1250dd9f6a7.exe 1460 9c7ab7988bf64d6d07df97da7d624936ac4c0ddab82b41488bc9e1250dd9f6a7.exe 1460 9c7ab7988bf64d6d07df97da7d624936ac4c0ddab82b41488bc9e1250dd9f6a7.exe