Analysis
-
max time kernel
118s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system -
submitted
22-08-2023 13:20
Static task
static1
Behavioral task
behavioral1
Sample
51934f5e885028f61d6a445ab81ee7d77eea1cb4021b2ea5a59c9601da96f97f.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
51934f5e885028f61d6a445ab81ee7d77eea1cb4021b2ea5a59c9601da96f97f.exe
Resource
win10v2004-20230703-en
General
-
Target
51934f5e885028f61d6a445ab81ee7d77eea1cb4021b2ea5a59c9601da96f97f.exe
-
Size
1.4MB
-
MD5
a9d386fb831c837f4317a5f098211271
-
SHA1
1ddd1ff31ec5d15cda08253acf5a927e2feeeb53
-
SHA256
51934f5e885028f61d6a445ab81ee7d77eea1cb4021b2ea5a59c9601da96f97f
-
SHA512
0f465e6ef66e07438e7d8e37ffd22d96b760bb9ae92a34d06676a54cc23bc61c01dd12547d4ef7519bb0d10fea2cdcad3d3b0c6b32252195a40233bce71ec6c5
-
SSDEEP
24576:b/MKrk0UcWOOA0mvf1MREOT9NO/JQRfkeFBYZQRT:bec7vfwFTy/eRfXYZ2
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2216 51934f5e885028f61d6a445ab81ee7d77eea1cb4021b2ea5a59c9601da96f97f.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2216 51934f5e885028f61d6a445ab81ee7d77eea1cb4021b2ea5a59c9601da96f97f.exe 2216 51934f5e885028f61d6a445ab81ee7d77eea1cb4021b2ea5a59c9601da96f97f.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\51934f5e885028f61d6a445ab81ee7d77eea1cb4021b2ea5a59c9601da96f97f.exe"C:\Users\Admin\AppData\Local\Temp\51934f5e885028f61d6a445ab81ee7d77eea1cb4021b2ea5a59c9601da96f97f.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2216