Analysis
-
max time kernel
87s -
max time network
33s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
02-03-2023 08:53
Static task
static1
Behavioral task
behavioral1
Sample
bd44bb479cb913a455115e330e4357ccd082029f33d43cefedec61f189088afe.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
bd44bb479cb913a455115e330e4357ccd082029f33d43cefedec61f189088afe.exe
Resource
win10v2004-20230221-en
General
-
Target
bd44bb479cb913a455115e330e4357ccd082029f33d43cefedec61f189088afe.exe
-
Size
372KB
-
MD5
1329ce816d12b14a63747a937bc4585b
-
SHA1
6845bfddf61e011bc39b96521b0bab6ee2cc117f
-
SHA256
bd44bb479cb913a455115e330e4357ccd082029f33d43cefedec61f189088afe
-
SHA512
583e97aecf5026c6993318ef2f7be2b1b5e60d8cd86661a63112aad79be2041693d33c08a67bb2a6dc8145c8912584325c1911fe8cd947746d7e1517da96b8fc
-
SSDEEP
6144:Qlu8yNA7g198Rqj0kRnus4VqEVxlNU9N9ELzyDjuBYqgWtdiNEPUP:EuZyqjKJVReN9E3yDjuBzLKEP
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1520 bd44bb479cb913a455115e330e4357ccd082029f33d43cefedec61f189088afe.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1520 bd44bb479cb913a455115e330e4357ccd082029f33d43cefedec61f189088afe.exe 1520 bd44bb479cb913a455115e330e4357ccd082029f33d43cefedec61f189088afe.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\bd44bb479cb913a455115e330e4357ccd082029f33d43cefedec61f189088afe.exe"C:\Users\Admin\AppData\Local\Temp\bd44bb479cb913a455115e330e4357ccd082029f33d43cefedec61f189088afe.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1520