Analysis
-
max time kernel
25s -
max time network
133s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
16/08/2023, 05:40
Static task
static1
Behavioral task
behavioral1
Sample
92deb173cf7756a4dad6c258cb72eadb9d654066f8d28c226fae3b7444fb7df5.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
92deb173cf7756a4dad6c258cb72eadb9d654066f8d28c226fae3b7444fb7df5.exe
Resource
win10v2004-20230703-en
General
-
Target
92deb173cf7756a4dad6c258cb72eadb9d654066f8d28c226fae3b7444fb7df5.exe
-
Size
3.1MB
-
MD5
4d29651ae4a3b426c870a710463f27b8
-
SHA1
8ccdb1acd8828f6457381faa8de00c5ab80c9f5e
-
SHA256
92deb173cf7756a4dad6c258cb72eadb9d654066f8d28c226fae3b7444fb7df5
-
SHA512
f09fcad5b61da09bfc7c313495d89a588ea3aeac695f37a514298b7859d299bb11f6bed27ca249163a4d062fda1b755db1f43d26c153552c758b32cec5670854
-
SSDEEP
98304:WhnkXKr18K3omlR91XBYYmm3ASzTRwld/3XlmT8GiwSIRN0p3zqBj:WXfVqYnQSzTRwld/3XzcRLBj
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/3040-135-0x0000000010000000-0x0000000010089000-memory.dmp vmprotect behavioral2/memory/3040-143-0x0000000010000000-0x0000000010089000-memory.dmp vmprotect behavioral2/memory/3040-145-0x0000000010000000-0x0000000010089000-memory.dmp vmprotect behavioral2/memory/3040-135-0x0000000010000000-0x0000000010089000-memory.dmp vmprotect behavioral2/memory/3040-143-0x0000000010000000-0x0000000010089000-memory.dmp vmprotect behavioral2/memory/3040-145-0x0000000010000000-0x0000000010089000-memory.dmp vmprotect -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3040 92deb173cf7756a4dad6c258cb72eadb9d654066f8d28c226fae3b7444fb7df5.exe 3040 92deb173cf7756a4dad6c258cb72eadb9d654066f8d28c226fae3b7444fb7df5.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\92deb173cf7756a4dad6c258cb72eadb9d654066f8d28c226fae3b7444fb7df5.exe"C:\Users\Admin\AppData\Local\Temp\92deb173cf7756a4dad6c258cb72eadb9d654066f8d28c226fae3b7444fb7df5.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:3040
-
C:\Users\Admin\AppData\Local\Temp\92deb173cf7756a4dad6c258cb72eadb9d654066f8d28c226fae3b7444fb7df5.exe"C:\Users\Admin\AppData\Local\Temp\92deb173cf7756a4dad6c258cb72eadb9d654066f8d28c226fae3b7444fb7df5.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:3040