Analysis
-
max time kernel
119s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system -
submitted
28-08-2023 19:30
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
yyb4.sp.exe
Resource
win7-20230712-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
yyb4.sp.exe
Resource
win10v2004-20230703-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
yyb4.sp.exe
-
Size
35.7MB
-
MD5
f871a3ae0740b8408af7533b185dd248
-
SHA1
b0cc8578e83d1bfe38e0ea2417ef8539773c3834
-
SHA256
b99de4a0b35d5487a657e4cf0259fe31943855c5112e538ed080644f1c169b55
-
SHA512
51003a682b61576c5c188c59786b9066c39972a4c80959fc808093699c531ea6cbd7f4bd313bc7040b79033eeca49f81e6a6dcab09f62e6c68867a9f4ec90ba3
-
SSDEEP
786432:lpY5wFjE0S5KL6Gqf7JXmyJxZ54+UetzG:lpWwFjpYxZ++U4z
Score
1/10
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 30 IoCs
pid Process 1340 yyb4.sp.exe 1340 yyb4.sp.exe 1340 yyb4.sp.exe 1340 yyb4.sp.exe 1340 yyb4.sp.exe 1340 yyb4.sp.exe 1340 yyb4.sp.exe 1340 yyb4.sp.exe 1340 yyb4.sp.exe 1340 yyb4.sp.exe 1340 yyb4.sp.exe 1340 yyb4.sp.exe 1340 yyb4.sp.exe 1340 yyb4.sp.exe 1340 yyb4.sp.exe 1340 yyb4.sp.exe 1340 yyb4.sp.exe 1340 yyb4.sp.exe 1340 yyb4.sp.exe 1340 yyb4.sp.exe 1340 yyb4.sp.exe 1340 yyb4.sp.exe 1340 yyb4.sp.exe 1340 yyb4.sp.exe 1340 yyb4.sp.exe 1340 yyb4.sp.exe 1340 yyb4.sp.exe 1340 yyb4.sp.exe 1340 yyb4.sp.exe 1340 yyb4.sp.exe