Analysis
- max time kernel
142s - max time network
145s - platform
windows10-2004_x64 - resource
win10v2004-20230703-en - resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system - submitted
17/08/2023, 20:37
Behavioral task
behavioral1
Sample
2764-1223-0x0000000000400000-0x000000000046C000-memory.exe
Resource
win7-20230712-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2764-1223-0x0000000000400000-0x000000000046C000-memory.exe
Resource
win10v2004-20230703-en
2 signatures
150 seconds
General
- Target 2764-1223-0x0000000000400000-0x000000000046C000-memory.exe
- Size 432KB
- Sample230817-zees1aeg7t
- SHA256 1e966dca35d4a1f0ba7067ef633c6b539457cb214afc4200466b2f431ae6a69c
- MD5 6a24c3fe4c1746a2b62905041f05abdd
- SHA1 e377f02305501b376f660f97433567d5121881bc
- SHA512 0f2f44ed5bf128e151aac040e115188dc4c7622668c225c0e106224acf5051d5292a651ad3378983caccfe5a22dd2764a01a690ea42313e36c19d80634e5a157
- SSDEEP 12288:0VJs0b5mHDoeCmoIimfzSy/qy1l8jYKkJj6GmZU:YJ55oHfzSMqy1lyYb6nZ
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1472 2764-1223-0x0000000000400000-0x000000000046C000-memory.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1472 2764-1223-0x0000000000400000-0x000000000046C000-memory.exe