Analysis
-
max time kernel
142s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
09-06-2023 19:42
Behavioral task
behavioral1
Sample
b0be08afdfdc09bfa16082b93f264e661d87d7f04c5c557837b94bad970bfdb5.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
b0be08afdfdc09bfa16082b93f264e661d87d7f04c5c557837b94bad970bfdb5.exe
Resource
win10v2004-20230220-en
General
-
Target
b0be08afdfdc09bfa16082b93f264e661d87d7f04c5c557837b94bad970bfdb5.exe
-
Size
4.8MB
-
MD5
1fd61593246d10b042a733c4db836d19
-
SHA1
55455d757f5be4aba6e2d255044d7196626922e7
-
SHA256
b0be08afdfdc09bfa16082b93f264e661d87d7f04c5c557837b94bad970bfdb5
-
SHA512
46253cbe90696ba24b7c268937a87ed58a276d2e202486ae2783430fb1b1466073341898825448f60cb4d9d5ab8ceea4b8cdf5386c6eb7c82f694e30e93ffa20
-
SSDEEP
98304:10q40tj8/mLQaEW/Nrxf5Yr+CcmXulT20jjCAe6KVBhVU/on8VJzBS+ENFY00Jf:qq4B+LQ2/XfyXcmMFcZXibzGF/0J
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/2100-137-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/2100-136-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/2100-140-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/2100-142-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/2100-144-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/2100-146-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/2100-148-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/2100-150-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/2100-152-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/2100-154-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/2100-156-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/2100-158-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/2100-160-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/2100-162-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/2100-164-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/2100-166-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/2100-168-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/2100-170-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/2100-172-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/2100-174-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/2100-176-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/2100-178-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/2100-180-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/2100-182-0x0000000010000000-0x000000001003E000-memory.dmp upx -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2100 b0be08afdfdc09bfa16082b93f264e661d87d7f04c5c557837b94bad970bfdb5.exe 2100 b0be08afdfdc09bfa16082b93f264e661d87d7f04c5c557837b94bad970bfdb5.exe 2100 b0be08afdfdc09bfa16082b93f264e661d87d7f04c5c557837b94bad970bfdb5.exe