Analysis
-
max time kernel
27s -
max time network
30s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
08-06-2023 14:03
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
111.exe
Resource
win7-20230220-en
windows7-x64
3 signatures
120 seconds
General
-
Target
111.exe
-
Size
19.0MB
-
MD5
7bb608b88b332b0e87c48dd7b0f7f693
-
SHA1
0c08534ec33da6b4cd5560389ff24cbdbdaf8b5f
-
SHA256
f8fcbaf87c132288a5071dacde3545e0b4cd35fafc71f960c27c26af03dea3e7
-
SHA512
b1f8d5a8ec852b6f958cdd7f0cf3fc421135a0807df63507163ac328c024829f3bf0ffba9a77dba9ffb69ccc1a0165e21751afc0c87b145604754be963ea1e0b
-
SSDEEP
393216:ZskGz5Q7qhR/GYuGI61Mm1dSFW0J8sjqJ2x7Tc0HUD9iYR4roD7:Z5GHRTuGz1MqSFWK88qJ2JTc0HdYAoD7
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1776-63-0x00000000003C0000-0x00000000003E7000-memory.dmp upx behavioral1/memory/1776-64-0x00000000003C0000-0x00000000003E7000-memory.dmp upx behavioral1/memory/1776-66-0x00000000003C0000-0x00000000003E7000-memory.dmp upx -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1776 111.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1776 111.exe 1776 111.exe 1776 111.exe