Analysis
-
max time kernel
118s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
08-10-2023 18:24
Static task
static1
Behavioral task
behavioral1
Sample
5cd6666b218caaca7d095cbb71965a9003f9a40462c0474044911f31522f72b1.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
5cd6666b218caaca7d095cbb71965a9003f9a40462c0474044911f31522f72b1.exe
Resource
win10v2004-20230915-en
General
-
Target
5cd6666b218caaca7d095cbb71965a9003f9a40462c0474044911f31522f72b1.exe
-
Size
1.3MB
-
MD5
3ab38851666f755a6520563b2c7f3261
-
SHA1
a1ccb25bbee3a78c8327fafc1d1eac0332372e5f
-
SHA256
5cd6666b218caaca7d095cbb71965a9003f9a40462c0474044911f31522f72b1
-
SHA512
c2b063590bf4a6699a2386659395b20e2656d9303e3c27d2d2d2ab3ffd9fb58466e7bff8d0132e42bf5784cfe83c393edd59166526090b4f18db1a1f087719a6
-
SSDEEP
12288:1VGiXZ/xAEv3AQK47Nt+I/hfwoMKSbhWuGE/2GER5nWFpPoS4r:1DbQQ17z+2hdNSbEuGE/2eb2r
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2340-0-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2340-1-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2340-3-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2340-5-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2340-2-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2340-9-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2340-11-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2340-7-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2340-15-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2340-13-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2340-17-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2340-20-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2340-22-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2340-25-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2340-29-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2340-31-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2340-27-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2340-35-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2340-33-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2340-38-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2340-40-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2340-43-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2340-45-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2340-47-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2340-48-0x0000000010000000-0x000000001003E000-memory.dmp upx -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2340 5cd6666b218caaca7d095cbb71965a9003f9a40462c0474044911f31522f72b1.exe 2340 5cd6666b218caaca7d095cbb71965a9003f9a40462c0474044911f31522f72b1.exe 2340 5cd6666b218caaca7d095cbb71965a9003f9a40462c0474044911f31522f72b1.exe 2340 5cd6666b218caaca7d095cbb71965a9003f9a40462c0474044911f31522f72b1.exe