Analysis
-
max time kernel
142s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
30/08/2023, 21:02
Static task
static1
Behavioral task
behavioral1
Sample
f67133b9470c31e25ee7ecaee0b99fd03748ca4cf4d4d33a82cf6142a406c151.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
f67133b9470c31e25ee7ecaee0b99fd03748ca4cf4d4d33a82cf6142a406c151.exe
Resource
win10v2004-20230703-en
General
-
Target
f67133b9470c31e25ee7ecaee0b99fd03748ca4cf4d4d33a82cf6142a406c151.exe
-
Size
3.2MB
-
MD5
7821ed14254aab323d6b5212e9387cff
-
SHA1
66927cd8acd290c809ed28aac235be314b61dc3e
-
SHA256
f67133b9470c31e25ee7ecaee0b99fd03748ca4cf4d4d33a82cf6142a406c151
-
SHA512
edee09f2987bad1d515df6442dee400075eafb74158c443a9758fa62da43663afefd959f4e97cbe06eb1b703165d770f816e3ab008f164cf5b64d1b8899afd9f
-
SSDEEP
49152:vNOXfCh4k2IF3bqeOVZE3Xed72Bed7faMxBoO+s8KuqGaX0ToIBAUZLYn9y:Sah4k2WWeAuVKhxBMJBAUZLks
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/2808-1-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/2808-2-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/2808-3-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/2808-7-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/2808-5-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/2808-9-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/2808-11-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/2808-13-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/2808-15-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/2808-17-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/2808-19-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/2808-21-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/2808-23-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/2808-25-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/2808-27-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/2808-29-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/2808-31-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/2808-33-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/2808-35-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/2808-37-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/2808-39-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/2808-41-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/2808-43-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/2808-44-0x0000000010000000-0x000000001003E000-memory.dmp upx -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2808 f67133b9470c31e25ee7ecaee0b99fd03748ca4cf4d4d33a82cf6142a406c151.exe 2808 f67133b9470c31e25ee7ecaee0b99fd03748ca4cf4d4d33a82cf6142a406c151.exe 2808 f67133b9470c31e25ee7ecaee0b99fd03748ca4cf4d4d33a82cf6142a406c151.exe