Analysis
-
max time kernel
140s -
max time network
33s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
08-06-2023 19:34
Behavioral task
behavioral1
Sample
999e162a63835e33152dbcde37199a69919b3f5ca9dcbc2f7dfc6c1da6a3260e.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
999e162a63835e33152dbcde37199a69919b3f5ca9dcbc2f7dfc6c1da6a3260e.exe
Resource
win10v2004-20230221-en
General
-
Target
999e162a63835e33152dbcde37199a69919b3f5ca9dcbc2f7dfc6c1da6a3260e.exe
-
Size
2.9MB
-
MD5
89139d63193c7ad9db632f9263790db9
-
SHA1
43b387726621986f62b8492bf076ae565a660ed5
-
SHA256
999e162a63835e33152dbcde37199a69919b3f5ca9dcbc2f7dfc6c1da6a3260e
-
SHA512
9bb6415e4833a3a65b47bf33366644c2dedafbc3a5fb326833379ba05d23cd4aaef709061669cec207a318ad092920a0b61da2184a5efcf14b1691430359642a
-
SSDEEP
49152:ANnuHTqBNuPwg1rJVKR3Tl8sOglH6Je6KfJ+YNHFixWR+WSzRHd3obiBHEfog2:AqkTg1rJQVFOglIefJNNHosRRSzZd3o+
Malware Config
Signatures
-
Modifies Control Panel 3 IoCs
Processes:
999e162a63835e33152dbcde37199a69919b3f5ca9dcbc2f7dfc6c1da6a3260e.exedescription ioc process Set value (str) \REGISTRY\USER\S-1-5-21-1563773381-2037468142-1146002597-1000\Control Panel\International\sShortDate = "yyyy-MM-dd" 999e162a63835e33152dbcde37199a69919b3f5ca9dcbc2f7dfc6c1da6a3260e.exe Set value (str) \REGISTRY\USER\S-1-5-21-1563773381-2037468142-1146002597-1000\Control Panel\International\iDate = "2" 999e162a63835e33152dbcde37199a69919b3f5ca9dcbc2f7dfc6c1da6a3260e.exe Set value (str) \REGISTRY\USER\S-1-5-21-1563773381-2037468142-1146002597-1000\Control Panel\International\sDate = "-" 999e162a63835e33152dbcde37199a69919b3f5ca9dcbc2f7dfc6c1da6a3260e.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
Processes:
999e162a63835e33152dbcde37199a69919b3f5ca9dcbc2f7dfc6c1da6a3260e.exepid process 1324 999e162a63835e33152dbcde37199a69919b3f5ca9dcbc2f7dfc6c1da6a3260e.exe 1324 999e162a63835e33152dbcde37199a69919b3f5ca9dcbc2f7dfc6c1da6a3260e.exe 1324 999e162a63835e33152dbcde37199a69919b3f5ca9dcbc2f7dfc6c1da6a3260e.exe