Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system -
submitted
21-08-2023 03:47
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
7092b33e1c8a10d49ca1bdd37813934c.exe
Resource
win7-20230712-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
7092b33e1c8a10d49ca1bdd37813934c.exe
Resource
win10v2004-20230703-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
7092b33e1c8a10d49ca1bdd37813934c.exe
-
Size
648KB
-
MD5
7092b33e1c8a10d49ca1bdd37813934c
-
SHA1
294a14e405a6c392b188039cccb3d03f717fe8b7
-
SHA256
71bbb26e4882569fe6ee63072377730b6ca557c787704a83461a2b671244b451
-
SHA512
bc09472f67cb0a1192354c6b0453d9798339ff873396a853c5e5e9145278f92f9de6fccc98669395c9cddb7856a2742e24b097e1176d187a5f7154b5dd0a635e
-
SSDEEP
12288:9nzSaiOqQPpHfszHF7DVER+vmporH/5BEyXqe9qQe6BxEl/3oruJRV4U:9nzB9FPp/CFSpoD5qyXqmpKyruN4U
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 2492 7092b33e1c8a10d49ca1bdd37813934c.exe -
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 2492 7092b33e1c8a10d49ca1bdd37813934c.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2492 7092b33e1c8a10d49ca1bdd37813934c.exe