Analysis
-
max time kernel
145s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
07/10/2023, 10:23
Behavioral task
behavioral1
Sample
8e1b00092e069455bf0f36aab69c4179e36eea111dcbf4179f80d4df3ee26202.exe
Resource
win7-20230831-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
8e1b00092e069455bf0f36aab69c4179e36eea111dcbf4179f80d4df3ee26202.exe
Resource
win10v2004-20230915-en
3 signatures
150 seconds
General
-
Target
8e1b00092e069455bf0f36aab69c4179e36eea111dcbf4179f80d4df3ee26202.exe
-
Size
1.3MB
-
MD5
2fa870a6749835f53d1758217b8c668b
-
SHA1
dd3cc297d051a5d68a681be701df8ed82479244a
-
SHA256
8e1b00092e069455bf0f36aab69c4179e36eea111dcbf4179f80d4df3ee26202
-
SHA512
dd32320b7746eb18bad667372cb7a4a96d3b6980c28cff3716888b96089606bb29521305911d03caeccbb1e43cea16d96df15ba22c1eeb3c73b547f4295ba5e0
-
SSDEEP
24576:kclT7dX+4DmdyMhPUu3AN5cXJTrupA5W4+CqtyPFz:kclXdOWMhcO1ZmCq09
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
description ioc Process File created C:\Windows\SysWOW64\rTF23PvZ.sys 8e1b00092e069455bf0f36aab69c4179e36eea111dcbf4179f80d4df3ee26202.exe -
Suspicious behavior: LoadsDriver 1 IoCs
pid Process 656 Process not Found -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1200 8e1b00092e069455bf0f36aab69c4179e36eea111dcbf4179f80d4df3ee26202.exe 1200 8e1b00092e069455bf0f36aab69c4179e36eea111dcbf4179f80d4df3ee26202.exe