Analysis
-
max time kernel
142s -
max time network
49s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system -
submitted
07-01-2023 18:24
Static task
static1
Behavioral task
behavioral1
Sample
c955d15de786154108180627d2c0810299519e50ab190f0cb62a4bce0de9a241.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c955d15de786154108180627d2c0810299519e50ab190f0cb62a4bce0de9a241.exe
Resource
win10v2004-20220901-en
General
-
Target
c955d15de786154108180627d2c0810299519e50ab190f0cb62a4bce0de9a241.exe
-
Size
290KB
-
MD5
129967a9753cb885a4eeeb986d876b3d
-
SHA1
f1c3c4fd98d4513e8c0e7d72b7d0552ef5a9aff2
-
SHA256
c955d15de786154108180627d2c0810299519e50ab190f0cb62a4bce0de9a241
-
SHA512
c26b4ef72ab036c9c30a199b47899bf8899e5f185907d5d054d79d6b80936380d4a4eac5ceb16642a8bca803decdd63ae4e1a21953423bb07a4d7729b6e93151
-
SSDEEP
6144:rRxZvPX7XnLc6FoXLXPeiuUDYfqeygBl4TtKxk3v0Lrj28nd2H7p:dxZvfrLc17XPkUDYfqJgEKu3v0Lrae2b
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1292 c955d15de786154108180627d2c0810299519e50ab190f0cb62a4bce0de9a241.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1292 c955d15de786154108180627d2c0810299519e50ab190f0cb62a4bce0de9a241.exe 1292 c955d15de786154108180627d2c0810299519e50ab190f0cb62a4bce0de9a241.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\c955d15de786154108180627d2c0810299519e50ab190f0cb62a4bce0de9a241.exe"C:\Users\Admin\AppData\Local\Temp\c955d15de786154108180627d2c0810299519e50ab190f0cb62a4bce0de9a241.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1292