Analysis
-
max time kernel
118s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system -
submitted
26/08/2023, 22:05
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
98ad5c1d8b174d4a86bd002032fde53ef16dfb0ef7f868e3e57d7b49597eaec5.exe
Resource
win7-20230712-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
98ad5c1d8b174d4a86bd002032fde53ef16dfb0ef7f868e3e57d7b49597eaec5.exe
Resource
win10v2004-20230703-en
2 signatures
150 seconds
General
-
Target
98ad5c1d8b174d4a86bd002032fde53ef16dfb0ef7f868e3e57d7b49597eaec5.exe
-
Size
3.1MB
-
MD5
4a550c6b5217fc29958ca8a6324888f1
-
SHA1
bb63d60b84d197177ccaf5ca5a27c00dfeb2e61d
-
SHA256
98ad5c1d8b174d4a86bd002032fde53ef16dfb0ef7f868e3e57d7b49597eaec5
-
SHA512
7f6daddd1dba304cac29bcbdccb51becfd557368440fb8883d0bf19a55e0832005a2808cfabd45f3b0e8ecea3a48959b3e59e63ad19f71b908c2b89c127c2267
-
SSDEEP
98304:zfyxK6Nht8MQtjDbhCTV0Rqkx/Iwz4UQP2l:E1huMuYoqkx1yU
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
description ioc Process File opened for modification C:\Windows\SysWOW64\ntdk.ini 98ad5c1d8b174d4a86bd002032fde53ef16dfb0ef7f868e3e57d7b49597eaec5.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2072 98ad5c1d8b174d4a86bd002032fde53ef16dfb0ef7f868e3e57d7b49597eaec5.exe 2072 98ad5c1d8b174d4a86bd002032fde53ef16dfb0ef7f868e3e57d7b49597eaec5.exe