Analysis
-
max time kernel
142s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
22/09/2023, 02:32
Static task
static1
Behavioral task
behavioral1
Sample
9f5d669ca71a3ad6225f16574c0c818687b51241dfa8795527292903211ad0fc.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
9f5d669ca71a3ad6225f16574c0c818687b51241dfa8795527292903211ad0fc.exe
Resource
win10v2004-20230915-en
General
-
Target
9f5d669ca71a3ad6225f16574c0c818687b51241dfa8795527292903211ad0fc.exe
-
Size
10.6MB
-
MD5
aef573b6cee2478c56648dcd1c056c0c
-
SHA1
8e6251c8d017cce37be1b26b612c82d8b3f6d692
-
SHA256
9f5d669ca71a3ad6225f16574c0c818687b51241dfa8795527292903211ad0fc
-
SHA512
2802d780ff6970f8c20d3b20d285aaf291ed95d14ec40b053ef3eac14c4ee220055fba287836248776c8c4fdccb4e6f890010980dbadec16d8996cb3ed55c62e
-
SSDEEP
98304:l1mnUTypm9uALfprsQvt9gogE3EbEmEqJBAUZLBv+:iUuAdDLgogE3EbEmEqJVN+
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4116-1-0x0000000010000000-0x000000001000B000-memory.dmp upx behavioral2/memory/4116-2-0x0000000010000000-0x000000001000B000-memory.dmp upx -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 4116 9f5d669ca71a3ad6225f16574c0c818687b51241dfa8795527292903211ad0fc.exe 4116 9f5d669ca71a3ad6225f16574c0c818687b51241dfa8795527292903211ad0fc.exe 4116 9f5d669ca71a3ad6225f16574c0c818687b51241dfa8795527292903211ad0fc.exe 4116 9f5d669ca71a3ad6225f16574c0c818687b51241dfa8795527292903211ad0fc.exe