Analysis
-
max time kernel
89s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
16-12-2022 19:21
Static task
static1
Behavioral task
behavioral1
Sample
7c5c19292af48fd62154ce5b2c1b3ae2f9e5c34e9b1cc76ae3823de34e9c055e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7c5c19292af48fd62154ce5b2c1b3ae2f9e5c34e9b1cc76ae3823de34e9c055e.exe
Resource
win10v2004-20220812-en
General
-
Target
7c5c19292af48fd62154ce5b2c1b3ae2f9e5c34e9b1cc76ae3823de34e9c055e.exe
-
Size
1.2MB
-
MD5
578f39efd7dda88ffe41172074df7bb6
-
SHA1
ac85d152c787f75f599be256a2c0e541a8ddf8b6
-
SHA256
7c5c19292af48fd62154ce5b2c1b3ae2f9e5c34e9b1cc76ae3823de34e9c055e
-
SHA512
ab8e45b0a8117d1f5863d1e697e17a50745ba713334136381328323f7c21d0ab334201d347d6c1a9ec664fe39d0018d1b006c3a03e5ed53cc7197321a396c220
-
SSDEEP
12288:4Ye+hUQx1o+LekME9UloPvgy93aO7qO6/GtR5nWFpPoSwjrrwR:4QF1hLekJ9KoPYypHqT/tbijrUR
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4128-132-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/4128-134-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/4128-133-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/4128-136-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/4128-138-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/4128-142-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/4128-140-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/4128-144-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/4128-146-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/4128-148-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/4128-150-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/4128-152-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/4128-154-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/4128-156-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/4128-158-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/4128-160-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/4128-164-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/4128-162-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/4128-166-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/4128-168-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/4128-170-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/4128-172-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/4128-174-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/4128-175-0x0000000010000000-0x000000001003E000-memory.dmp upx -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 4128 7c5c19292af48fd62154ce5b2c1b3ae2f9e5c34e9b1cc76ae3823de34e9c055e.exe 4128 7c5c19292af48fd62154ce5b2c1b3ae2f9e5c34e9b1cc76ae3823de34e9c055e.exe 4128 7c5c19292af48fd62154ce5b2c1b3ae2f9e5c34e9b1cc76ae3823de34e9c055e.exe 4128 7c5c19292af48fd62154ce5b2c1b3ae2f9e5c34e9b1cc76ae3823de34e9c055e.exe