Analysis
-
max time kernel
120s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20230621-en -
resource tags
arch:x64arch:x86image:win10v2004-20230621-enlocale:en-usos:windows10-2004-x64system -
submitted
30-06-2023 12:56
Static task
static1
Behavioral task
behavioral1
Sample
PCclear_Eng_mini.exe
Resource
win7-20230621-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
PCclear_Eng_mini.exe
Resource
win10v2004-20230621-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
PCclear_Eng_mini.exe
-
Size
32KB
-
MD5
b41541e6a56a4b091855938cefc8b0f0
-
SHA1
8006b2728d05eab4c5d6dc0bb3b115ddc1e2eaa7
-
SHA256
d4c48762f128436fed18b9c714e55bf7360802127efb233ad31ec4b0f7f649b1
-
SHA512
a3c2b5dddbb5b8ded63e04672610287458b4bed6ea054e45804e612a2896d92412ef632c621a49b445412d8998a5edc914b055502e22fcfe0e178e5098b64828
-
SSDEEP
384:ph8qCjcowiUJTIWIC0pc36+6rD5uH3XGJH3R1Dn/EMkudSGqoVU:fMw1JTYhCXXIXvr/JjAGx
Score
1/10
Malware Config
Signatures
-
Processes:
PCclear_Eng_mini.exedescription ioc process Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{625F76EE-DE78-428A-8B2D-96F06F3707A5} PCclear_Eng_mini.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{625F76EE-DE78-428A-8B2D-96F06F3707A5}\Compatibility Flags = "1024" PCclear_Eng_mini.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
Processes:
PCclear_Eng_mini.exepid process 4908 PCclear_Eng_mini.exe 4908 PCclear_Eng_mini.exe