Analysis
-
max time kernel
151s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
20/09/2023, 00:03
Static task
static1
Behavioral task
behavioral1
Sample
a7315dc34eb8daeee82249c73e3c1102ac96395bd2aa9b137b0adb4352635b21.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
a7315dc34eb8daeee82249c73e3c1102ac96395bd2aa9b137b0adb4352635b21.exe
Resource
win10v2004-20230915-en
General
-
Target
a7315dc34eb8daeee82249c73e3c1102ac96395bd2aa9b137b0adb4352635b21.exe
-
Size
6.3MB
-
MD5
5464917b792c46263f49596b65e58b88
-
SHA1
ce87b6ff7a1156d98a24aca3f92cca8e40601096
-
SHA256
a7315dc34eb8daeee82249c73e3c1102ac96395bd2aa9b137b0adb4352635b21
-
SHA512
441cdbe780e76f6d1099472a947bc76ddc601d7f57e60ab5f7a549829e3b411628d8c565aac98506dd820eff990a16a27e5df8255c90cc8ac7fb7c614fd7500b
-
SSDEEP
98304:GwYsi/0YL5Yc68aGAE3/MarNv6Gh8A/MFUSuAD3j+Kxctl+PSDxjPTig8:GqYts8pAEhrNvb2FUl+31xEl+PKdPC
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2160 a7315dc34eb8daeee82249c73e3c1102ac96395bd2aa9b137b0adb4352635b21.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2160 a7315dc34eb8daeee82249c73e3c1102ac96395bd2aa9b137b0adb4352635b21.exe 2160 a7315dc34eb8daeee82249c73e3c1102ac96395bd2aa9b137b0adb4352635b21.exe 2160 a7315dc34eb8daeee82249c73e3c1102ac96395bd2aa9b137b0adb4352635b21.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\a7315dc34eb8daeee82249c73e3c1102ac96395bd2aa9b137b0adb4352635b21.exe"C:\Users\Admin\AppData\Local\Temp\a7315dc34eb8daeee82249c73e3c1102ac96395bd2aa9b137b0adb4352635b21.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2160
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.3MB
MD55464917b792c46263f49596b65e58b88
SHA1ce87b6ff7a1156d98a24aca3f92cca8e40601096
SHA256a7315dc34eb8daeee82249c73e3c1102ac96395bd2aa9b137b0adb4352635b21
SHA512441cdbe780e76f6d1099472a947bc76ddc601d7f57e60ab5f7a549829e3b411628d8c565aac98506dd820eff990a16a27e5df8255c90cc8ac7fb7c614fd7500b