Analysis
-
max time kernel
117s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
22/09/2023, 09:12
Static task
static1
Behavioral task
behavioral1
Sample
efe5b519843a14cf1e666e3b4e4ebf7e183368ad610cd5d0ffd57f7eb646e675.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
efe5b519843a14cf1e666e3b4e4ebf7e183368ad610cd5d0ffd57f7eb646e675.exe
Resource
win10v2004-20230915-en
General
-
Target
efe5b519843a14cf1e666e3b4e4ebf7e183368ad610cd5d0ffd57f7eb646e675.exe
-
Size
145KB
-
MD5
5de57bb8c0a36328c980654fa712b096
-
SHA1
28c672deb971a4da5fd0b38178c639937a9fd656
-
SHA256
efe5b519843a14cf1e666e3b4e4ebf7e183368ad610cd5d0ffd57f7eb646e675
-
SHA512
1ae3cb0c8b0fe89917b36611ab5cc24dca4b71aa6f669365b28ecab391f36d45d88190d974a0b76e1f45e7e3d124dbd824c8707a5d86b1dd30e450a70c94d520
-
SSDEEP
3072:gkHBkYroKeYfOdmUt2AOF+MqqDLy/YVvWQkVrJu1:gkHJrveYfOdZtxOF1qqDLuY8LrJA
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2736 efe5b519843a14cf1e666e3b4e4ebf7e183368ad610cd5d0ffd57f7eb646e675.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2736 efe5b519843a14cf1e666e3b4e4ebf7e183368ad610cd5d0ffd57f7eb646e675.exe 2736 efe5b519843a14cf1e666e3b4e4ebf7e183368ad610cd5d0ffd57f7eb646e675.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\efe5b519843a14cf1e666e3b4e4ebf7e183368ad610cd5d0ffd57f7eb646e675.exe"C:\Users\Admin\AppData\Local\Temp\efe5b519843a14cf1e666e3b4e4ebf7e183368ad610cd5d0ffd57f7eb646e675.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2736