Analysis
-
max time kernel
142s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
07-10-2023 03:58
Static task
static1
Behavioral task
behavioral1
Sample
f21da4aacf7708eb4c8abf3678cf9b901d8780ba442fe4ed39b8108e7ef26a30.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
f21da4aacf7708eb4c8abf3678cf9b901d8780ba442fe4ed39b8108e7ef26a30.exe
Resource
win10v2004-20230915-en
General
-
Target
f21da4aacf7708eb4c8abf3678cf9b901d8780ba442fe4ed39b8108e7ef26a30.exe
-
Size
1.0MB
-
MD5
a415d772f92dedf2195d6aa3ff1a89a3
-
SHA1
7313bf8c47cde045434b4ee25cfa06dd15929502
-
SHA256
f21da4aacf7708eb4c8abf3678cf9b901d8780ba442fe4ed39b8108e7ef26a30
-
SHA512
3a31baadf592ced6f89090b8ce3d2b77bca2110e2495804d5ab0fae1e8c03b324008222d8a5ddc1561375c40917379e7f6cbadd89a92710a3ddf645880a5e9b1
-
SSDEEP
24576:WhU9z3aRhCB/lBCBTrmL4BwTeBLddDxF7U1DJ:WhU9z3aR4/Aq4Bfjd76V
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4892 f21da4aacf7708eb4c8abf3678cf9b901d8780ba442fe4ed39b8108e7ef26a30.exe 4892 f21da4aacf7708eb4c8abf3678cf9b901d8780ba442fe4ed39b8108e7ef26a30.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 4892 f21da4aacf7708eb4c8abf3678cf9b901d8780ba442fe4ed39b8108e7ef26a30.exe 4892 f21da4aacf7708eb4c8abf3678cf9b901d8780ba442fe4ed39b8108e7ef26a30.exe 4892 f21da4aacf7708eb4c8abf3678cf9b901d8780ba442fe4ed39b8108e7ef26a30.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\f21da4aacf7708eb4c8abf3678cf9b901d8780ba442fe4ed39b8108e7ef26a30.exe"C:\Users\Admin\AppData\Local\Temp\f21da4aacf7708eb4c8abf3678cf9b901d8780ba442fe4ed39b8108e7ef26a30.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4892