Analysis
-
max time kernel
143s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
08/10/2023, 10:07
Static task
static1
Behavioral task
behavioral1
Sample
49410a135fa7aa42b23ac4ef33240494e25dfa134c7e3b66702c7c5e50ac35e3.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
49410a135fa7aa42b23ac4ef33240494e25dfa134c7e3b66702c7c5e50ac35e3.exe
Resource
win10v2004-20230915-en
General
-
Target
49410a135fa7aa42b23ac4ef33240494e25dfa134c7e3b66702c7c5e50ac35e3.exe
-
Size
1.2MB
-
MD5
0d94e53a084813d410a67ed82e88ecc0
-
SHA1
0ff6fe32d022d4c30ac11040019338c33383512c
-
SHA256
49410a135fa7aa42b23ac4ef33240494e25dfa134c7e3b66702c7c5e50ac35e3
-
SHA512
03270745d7ece3a65b89618264cb802d58b97dfd34087eee245de894f0966c0b32b8c20b4c83712ebc9b18e0a159a5b88096981a1c483d109d0c4573c3c2ddb4
-
SSDEEP
24576:bMAuTggXbVy1IllCOPkaXjq57xBDFXsoDdnWbNfZr:bMzlBjq5GinW3
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/3824-9-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/3824-11-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/3824-12-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/3824-13-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/3824-14-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/3824-17-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/3824-15-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/3824-19-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/3824-21-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/3824-23-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/3824-25-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/3824-27-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/3824-29-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/3824-31-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/3824-33-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/3824-35-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/3824-37-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/3824-39-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/3824-41-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/3824-43-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/3824-45-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/3824-47-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/3824-49-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/3824-51-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/3824-53-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/3824-55-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral2/memory/3824-56-0x0000000010000000-0x000000001003E000-memory.dmp upx -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3824 49410a135fa7aa42b23ac4ef33240494e25dfa134c7e3b66702c7c5e50ac35e3.exe 3824 49410a135fa7aa42b23ac4ef33240494e25dfa134c7e3b66702c7c5e50ac35e3.exe 3824 49410a135fa7aa42b23ac4ef33240494e25dfa134c7e3b66702c7c5e50ac35e3.exe