Analysis
-
max time kernel
31s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
04-06-2023 18:15
Static task
static1
Behavioral task
behavioral1
Sample
2db0c616cde7ed3b70a771d7cc10da66e92fd9018a4c7e355781b15a41b1437c.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
2db0c616cde7ed3b70a771d7cc10da66e92fd9018a4c7e355781b15a41b1437c.exe
Resource
win10v2004-20230220-en
General
-
Target
2db0c616cde7ed3b70a771d7cc10da66e92fd9018a4c7e355781b15a41b1437c.exe
-
Size
1.2MB
-
MD5
98b16f17d4953b13f6b000e981af5edc
-
SHA1
9b0210bff277b5d073906a9ad6c3f43aff9300b8
-
SHA256
2db0c616cde7ed3b70a771d7cc10da66e92fd9018a4c7e355781b15a41b1437c
-
SHA512
0ce8b9bf51022f9b080d8bbfba094201bf0d99d9781bc2f049bfee54ac5ab28bf3614c7cad0637cb3bec543cb53cbdbbaad5df78ce087eb781b9475efef02ce8
-
SSDEEP
24576:d8z8SfD9qglXzQLxWyt4yR31ErC1HXFY2L4nVFDqa:yzjnWxWM4sFErC1HXFYLF
Malware Config
Signatures
-
Script User-Agent 1 IoCs
Uses user-agent string associated with script host/environment.
description flow ioc HTTP User-Agent header 1 Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1720 2db0c616cde7ed3b70a771d7cc10da66e92fd9018a4c7e355781b15a41b1437c.exe 1720 2db0c616cde7ed3b70a771d7cc10da66e92fd9018a4c7e355781b15a41b1437c.exe