Analysis
-
max time kernel
31s -
max time network
33s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
01-06-2023 19:55
Static task
static1
Behavioral task
behavioral1
Sample
36cbdf8d668c4909e01df08c8242c362bd64a80c025ce57346c9e74976e7c43e.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
36cbdf8d668c4909e01df08c8242c362bd64a80c025ce57346c9e74976e7c43e.exe
Resource
win10v2004-20230220-en
General
-
Target
36cbdf8d668c4909e01df08c8242c362bd64a80c025ce57346c9e74976e7c43e.exe
-
Size
351KB
-
MD5
db003e85ea304006688ceac1981981fa
-
SHA1
df5c944409d4005903e153e8a74a395d0c2f3982
-
SHA256
36cbdf8d668c4909e01df08c8242c362bd64a80c025ce57346c9e74976e7c43e
-
SHA512
a6054f1ddc4ed0f40bf6d1644f8fdee87b68b9b6453bbaf27170c4e57a1ce49d1555df3500c5b21f0d05a1b99a3e8113dc7623af3072c035fbdffecf2f6579b9
-
SSDEEP
6144:MKmpycsZyhC36BKbA4d7oRYsHC4qxwjImiz1K3ScE:amyhC36BkA4d4qxwJ0O
Malware Config
Signatures
-
Drops file in Windows directory 1 IoCs
description ioc Process File opened for modification C:\Windows\Debug\WIA\wiatrace.log 36cbdf8d668c4909e01df08c8242c362bd64a80c025ce57346c9e74976e7c43e.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2004 36cbdf8d668c4909e01df08c8242c362bd64a80c025ce57346c9e74976e7c43e.exe 2004 36cbdf8d668c4909e01df08c8242c362bd64a80c025ce57346c9e74976e7c43e.exe