Analysis
-
max time kernel
98s -
max time network
117s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
02/02/2023, 05:11
Static task
static1
Behavioral task
behavioral1
Sample
9ab98d537cc6d2c3d27bffab5643e185fc70b01fc49849858e385fb70a0ccfd3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9ab98d537cc6d2c3d27bffab5643e185fc70b01fc49849858e385fb70a0ccfd3.exe
Resource
win10v2004-20221111-en
General
-
Target
9ab98d537cc6d2c3d27bffab5643e185fc70b01fc49849858e385fb70a0ccfd3.exe
-
Size
1.8MB
-
MD5
2107f26c894862495ebc0908d7676299
-
SHA1
e53806ee5c795ef3e115bc9a4f437c203005ac38
-
SHA256
9ab98d537cc6d2c3d27bffab5643e185fc70b01fc49849858e385fb70a0ccfd3
-
SHA512
200da6e4d3b1ff5df4a1c1d59592d50d8b95fc912e95aea26d2c73dafdcb847e5fc51dbfa07c558539e558042b46c016f38d37b83eba0775928c5c35f5b020b0
-
SSDEEP
49152:cqGQDpSeQaCqU4Nq5UaqNJQDopPhQOcOilmoCPSfZr7SQiZNO:c32pHCqVNqSv/QDohhnBUmoCPSp7SQi
Malware Config
Signatures
-
Suspicious behavior: RenamesItself 1 IoCs
pid Process 4280 9ab98d537cc6d2c3d27bffab5643e185fc70b01fc49849858e385fb70a0ccfd3.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4280 9ab98d537cc6d2c3d27bffab5643e185fc70b01fc49849858e385fb70a0ccfd3.exe