Analysis
-
max time kernel
143s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
01/01/2023, 18:31
Static task
static1
Behavioral task
behavioral1
Sample
7ad84e6e326be86221047411b5e029d8781f87395dcac60950825617fa43a411.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7ad84e6e326be86221047411b5e029d8781f87395dcac60950825617fa43a411.exe
Resource
win10v2004-20221111-en
General
-
Target
7ad84e6e326be86221047411b5e029d8781f87395dcac60950825617fa43a411.exe
-
Size
2.1MB
-
MD5
a2101725ca5978ffc74a447078d7b279
-
SHA1
1629179a954d6fcb5554878d4ef4ef84dd24e5c9
-
SHA256
7ad84e6e326be86221047411b5e029d8781f87395dcac60950825617fa43a411
-
SHA512
e09e87176757a2c9d5a7549886eef75e33ae31217569217d53908b32953d75e6fffee5555abb46a9a23a45752d9ecc53b2bcb0758887c0f8cea53a667074faff
-
SSDEEP
49152:OeKwjlSpJYiMpHDa6mTCHINU5wH52jnvt0fL:OehZqWTHe6mT5NU5wHyvtM
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3540 7ad84e6e326be86221047411b5e029d8781f87395dcac60950825617fa43a411.exe 3540 7ad84e6e326be86221047411b5e029d8781f87395dcac60950825617fa43a411.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3540 7ad84e6e326be86221047411b5e029d8781f87395dcac60950825617fa43a411.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3540 7ad84e6e326be86221047411b5e029d8781f87395dcac60950825617fa43a411.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\7ad84e6e326be86221047411b5e029d8781f87395dcac60950825617fa43a411.exe"C:\Users\Admin\AppData\Local\Temp\7ad84e6e326be86221047411b5e029d8781f87395dcac60950825617fa43a411.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3540