Analysis
-
max time kernel
145s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
22/09/2023, 06:29
General
-
Target
3832-17-0x0000000000400000-0x0000000000479000-memory.exe
-
Size
484KB
-
MD5
626e7b7085c18d2d93e3b5e40db538bf
-
SHA1
bf980b45a0a5230fb77b987b4ee1ef128397b39b
-
SHA256
a7a36d6466affe7120244a5d1e853d66aa0750c35caa2d7d1d86be0bb1c11522
-
SHA512
e445bd9166f97b992ae1624e897654fc4003847573a1728fbadb753debdb90af1a3437009e0f3d36ca11b60c8cb8222a6d811329fb43dd50b22e85a21c71a6df
-
SSDEEP
12288:XdEGVYbpdTfEa7DjPI0rlLycsJpGaqHMjYKkJj6GmZU:tEG2pHI+lLfsJpGa2CYb6nZ
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3832-17-0x0000000000400000-0x0000000000479000-memory.exe"C:\Users\Admin\AppData\Local\Temp\3832-17-0x0000000000400000-0x0000000000479000-memory.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx