Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
04/05/2023, 18:40
Static task
static1
Behavioral task
behavioral1
Sample
66832e76b63f67411fcbe663f4982056175c9d678242e58648afce90ecd75691.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
66832e76b63f67411fcbe663f4982056175c9d678242e58648afce90ecd75691.exe
Resource
win10v2004-20230220-en
General
-
Target
66832e76b63f67411fcbe663f4982056175c9d678242e58648afce90ecd75691.exe
-
Size
2.6MB
-
MD5
1c4e76f9082bfd5b66d8f9f98b548a4c
-
SHA1
3e21ebdf90a819bd645ee610dee7bd72a5e1ccaf
-
SHA256
66832e76b63f67411fcbe663f4982056175c9d678242e58648afce90ecd75691
-
SHA512
40cd9bc1ac9c32115a486d9629230ab5316cbd21dc0555e58c7c66565d570176551080f49eed93417ed9f4af9291dd2b07aa2cfaddff862e0fe461e81c60461c
-
SSDEEP
49152:VTeZ9BNpEaShCmIr8TJh/GO19ImwT6KZOHzV1sHlSeT1q4sLjZQomW8r+qed9Pak:83vpEX4KHGG9AOTcFF17snZQoqFxniUM
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 3700 66832e76b63f67411fcbe663f4982056175c9d678242e58648afce90ecd75691.exe 3700 66832e76b63f67411fcbe663f4982056175c9d678242e58648afce90ecd75691.exe 3700 66832e76b63f67411fcbe663f4982056175c9d678242e58648afce90ecd75691.exe 3700 66832e76b63f67411fcbe663f4982056175c9d678242e58648afce90ecd75691.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\66832e76b63f67411fcbe663f4982056175c9d678242e58648afce90ecd75691.exe"C:\Users\Admin\AppData\Local\Temp\66832e76b63f67411fcbe663f4982056175c9d678242e58648afce90ecd75691.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:3700
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x2ec 0x3081⤵PID:1148