Analysis
-
max time kernel
88s -
max time network
31s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
02/03/2023, 06:39
Static task
static1
Behavioral task
behavioral1
Sample
e7e6f29a7eb364b906d8585d8dd73c92e068c49287374fdbdc1e1412d91456d6.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
e7e6f29a7eb364b906d8585d8dd73c92e068c49287374fdbdc1e1412d91456d6.exe
Resource
win10v2004-20230220-en
General
-
Target
e7e6f29a7eb364b906d8585d8dd73c92e068c49287374fdbdc1e1412d91456d6.exe
-
Size
429KB
-
MD5
20ffdf4735ebcdf2ac464797165b23d9
-
SHA1
5d170d966b18da7c11d823e36837b8b84c5a7b51
-
SHA256
e7e6f29a7eb364b906d8585d8dd73c92e068c49287374fdbdc1e1412d91456d6
-
SHA512
5b02a133f1c5442d6c3d1768e2abfb23f6133fc63ef4a2437b826e9d179d8ddc314c8ec6c83657cfb29ef451d3277c21631138beb94c489db3f992c4af94ab18
-
SSDEEP
6144:AGrs/+6zo/F4iCftiy0CmYZMQnZZ6pLlUCM0DL3LiFVMRDM855aNlP9FbooEzkg:AK4FOjCmGgiCTDL3eFVMRDF55qP9Fg
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1992 e7e6f29a7eb364b906d8585d8dd73c92e068c49287374fdbdc1e1412d91456d6.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1992 e7e6f29a7eb364b906d8585d8dd73c92e068c49287374fdbdc1e1412d91456d6.exe 1992 e7e6f29a7eb364b906d8585d8dd73c92e068c49287374fdbdc1e1412d91456d6.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\e7e6f29a7eb364b906d8585d8dd73c92e068c49287374fdbdc1e1412d91456d6.exe"C:\Users\Admin\AppData\Local\Temp\e7e6f29a7eb364b906d8585d8dd73c92e068c49287374fdbdc1e1412d91456d6.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1992