Analysis
-
max time kernel
42s -
max time network
45s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
02/02/2023, 13:34
Static task
static1
Behavioral task
behavioral1
Sample
1ff8f20c049a76bc7fd3db311c3b41a7915e744d.exe
Resource
win7-20220812-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
1ff8f20c049a76bc7fd3db311c3b41a7915e744d.exe
Resource
win10v2004-20220812-en
0 signatures
150 seconds
General
-
Target
1ff8f20c049a76bc7fd3db311c3b41a7915e744d.exe
-
Size
4KB
-
MD5
35116cb8850d3aa183ca323db634d8a5
-
SHA1
1ff8f20c049a76bc7fd3db311c3b41a7915e744d
-
SHA256
dae57368265ce5c1ad7bd2e4774744584d54605b581607bf147c8a0b51584a06
-
SHA512
e0dc88980a10195781a353c39cca3847ddf1bed1e1caae73733c48c6917b2f3c32d24bbc02e5e2f261bcc9429e332001f428f68e48f039b2e366f11091874660
-
SSDEEP
48:5e1sBF7vOFw1EZVrdlzF/KtI3o56LAw6dgL6bsR3Haq8o0clbxns1+46MfAJxDh:5pB/EvrfdKWddL2a6qL0Iso4sDh
Score
8/10
Malware Config
Signatures
-
Drops file in Drivers directory 1 IoCs
description ioc Process File opened for modification C:\Windows\system32\drivers\etc\hosts 1ff8f20c049a76bc7fd3db311c3b41a7915e744d.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1468 1ff8f20c049a76bc7fd3db311c3b41a7915e744d.exe