Analysis
-
max time kernel
123s -
max time network
128s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
18-09-2023 05:29
Behavioral task
behavioral1
Sample
c2a96a1aa786208aff79b2c7c5443cb97b6ba3e81bf88ae18cc853377537cf16.exe
Resource
win7-20230831-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
c2a96a1aa786208aff79b2c7c5443cb97b6ba3e81bf88ae18cc853377537cf16.exe
Resource
win10v2004-20230915-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
c2a96a1aa786208aff79b2c7c5443cb97b6ba3e81bf88ae18cc853377537cf16.exe
-
Size
2.9MB
-
MD5
ac2cdbd6e9b719567e2bbdb352f386b5
-
SHA1
67190722c2fe340aa98b5766454ce8692620162d
-
SHA256
c2a96a1aa786208aff79b2c7c5443cb97b6ba3e81bf88ae18cc853377537cf16
-
SHA512
64c37b31262705ebaf68864eec9e5249102af0745696d5ddd72855ab67ec96792785ca531e1e73bdf1242e6fee670e6f0400c2c2a6d32a51b070cc8d04a1fac3
-
SSDEEP
49152:gFe0A8Nm1JCyD8djTZm0yt00jFUqRk/yhPRVs/qZ4qtD56Og/gtQf3P8/:CmHCyD8doJ5DiU/
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4404-1-0x0000000010000000-0x0000000010018000-memory.dmp upx behavioral2/memory/4404-5-0x0000000010000000-0x0000000010018000-memory.dmp upx -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4404 c2a96a1aa786208aff79b2c7c5443cb97b6ba3e81bf88ae18cc853377537cf16.exe 4404 c2a96a1aa786208aff79b2c7c5443cb97b6ba3e81bf88ae18cc853377537cf16.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4404 c2a96a1aa786208aff79b2c7c5443cb97b6ba3e81bf88ae18cc853377537cf16.exe 4404 c2a96a1aa786208aff79b2c7c5443cb97b6ba3e81bf88ae18cc853377537cf16.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\c2a96a1aa786208aff79b2c7c5443cb97b6ba3e81bf88ae18cc853377537cf16.exe"C:\Users\Admin\AppData\Local\Temp\c2a96a1aa786208aff79b2c7c5443cb97b6ba3e81bf88ae18cc853377537cf16.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4404