Analysis
-
max time kernel
140s -
max time network
29s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
20/05/2023, 12:58
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
7b5755e302fdb3654cec56fe9430f38247139ed5e32ba54d2c55a3757781f2b7.exe
Resource
win7-20230220-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
7b5755e302fdb3654cec56fe9430f38247139ed5e32ba54d2c55a3757781f2b7.exe
Resource
win10v2004-20230220-en
2 signatures
150 seconds
General
-
Target
7b5755e302fdb3654cec56fe9430f38247139ed5e32ba54d2c55a3757781f2b7.exe
-
Size
273KB
-
MD5
0a82cbdaca034cb0b952728545df62e6
-
SHA1
293252ab054f2fe74d823a244f884b19dd3d431c
-
SHA256
7b5755e302fdb3654cec56fe9430f38247139ed5e32ba54d2c55a3757781f2b7
-
SHA512
60142eac71572eac3bcfd995816242db7c59d31ef3a702ed8e6be7132d01aaefe4141dae7b988e530b7b562d932858fd854c6fb41b111e65632337636c6200c3
-
SSDEEP
6144:kpL6y7C4ifFkIK6cn3EvfKHhLGL9enPoJ1cs4a:8p7PW+6zouUN/
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1580 7b5755e302fdb3654cec56fe9430f38247139ed5e32ba54d2c55a3757781f2b7.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1580 7b5755e302fdb3654cec56fe9430f38247139ed5e32ba54d2c55a3757781f2b7.exe 1580 7b5755e302fdb3654cec56fe9430f38247139ed5e32ba54d2c55a3757781f2b7.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\7b5755e302fdb3654cec56fe9430f38247139ed5e32ba54d2c55a3757781f2b7.exe"C:\Users\Admin\AppData\Local\Temp\7b5755e302fdb3654cec56fe9430f38247139ed5e32ba54d2c55a3757781f2b7.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1580
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x5181⤵PID:904