Analysis
-
max time kernel
146s -
max time network
153s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
12/03/2023, 05:53
Static task
static1
Behavioral task
behavioral1
Sample
ebea7264b83e87275c5dc75abde474cdff87c7b69f91ea0893d662f3b60597ed.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
ebea7264b83e87275c5dc75abde474cdff87c7b69f91ea0893d662f3b60597ed.exe
Resource
win10v2004-20230220-en
General
-
Target
ebea7264b83e87275c5dc75abde474cdff87c7b69f91ea0893d662f3b60597ed.exe
-
Size
746KB
-
MD5
bc5bcd91f8ed4e4100dd27ccff00426f
-
SHA1
657a428ac3ac532ae997b115124b79ae36ac35c7
-
SHA256
ebea7264b83e87275c5dc75abde474cdff87c7b69f91ea0893d662f3b60597ed
-
SHA512
b2bb828147d35461a991bf0969c3d2e4f4bd449e29e22110bb2a818be0989f642260f8164118597a9654ef12c04739e3cc5551a3f02bbe7b46acc8197578e052
-
SSDEEP
12288:PADrGJp/r9gnwwn2iU389UIyQdAfTD7EmDmG9vmauC7Nsnayh0Iph:4DrGJpDiwwn2iWkUIVAfTHx5vw3
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1268 ebea7264b83e87275c5dc75abde474cdff87c7b69f91ea0893d662f3b60597ed.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1268 ebea7264b83e87275c5dc75abde474cdff87c7b69f91ea0893d662f3b60597ed.exe