Analysis
-
max time kernel
26s -
max time network
34s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
12-04-2023 20:33
Static task
static1
Behavioral task
behavioral1
Sample
59e96153584da3cc6fe8209ab6abf7006b2bbac0fd62238e3ba5b886d2b8aa45.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
59e96153584da3cc6fe8209ab6abf7006b2bbac0fd62238e3ba5b886d2b8aa45.exe
Resource
win10v2004-20230221-en
General
-
Target
59e96153584da3cc6fe8209ab6abf7006b2bbac0fd62238e3ba5b886d2b8aa45.exe
-
Size
780KB
-
MD5
1cf3a820faebb5fd3dd72473e549cfda
-
SHA1
64034602e32b391feafb5db91855caa42caabdf4
-
SHA256
59e96153584da3cc6fe8209ab6abf7006b2bbac0fd62238e3ba5b886d2b8aa45
-
SHA512
1bdd5b69f91d666cb27962f5d3421bd0a277986d0ed178f63478813f7623c2e10b24acaac7aef0553208dcdab04df79bd4024971e006f98630d56e531fe4202b
-
SSDEEP
12288:dTIDzAhvL7P4eyD6Q+wpvECW2OMdv/iUol4SlU1hw0jTC85FPpslnl04FdHAp4aI:dTIDSvP4h+wtlZxOHlU1fjTC8Al0Ue4J
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 1952 59e96153584da3cc6fe8209ab6abf7006b2bbac0fd62238e3ba5b886d2b8aa45.exe -
Suspicious behavior: RenamesItself 1 IoCs
pid Process 1952 59e96153584da3cc6fe8209ab6abf7006b2bbac0fd62238e3ba5b886d2b8aa45.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1952 59e96153584da3cc6fe8209ab6abf7006b2bbac0fd62238e3ba5b886d2b8aa45.exe 1952 59e96153584da3cc6fe8209ab6abf7006b2bbac0fd62238e3ba5b886d2b8aa45.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\59e96153584da3cc6fe8209ab6abf7006b2bbac0fd62238e3ba5b886d2b8aa45.exe"C:\Users\Admin\AppData\Local\Temp\59e96153584da3cc6fe8209ab6abf7006b2bbac0fd62238e3ba5b886d2b8aa45.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: RenamesItself
- Suspicious use of SetWindowsHookEx
PID:1952