Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
09-10-2023 10:45
Static task
static1
Behavioral task
behavioral1
Sample
5841d705630e45cb05e50892dd17b4bb8b67779e7c820980ac33831d01e0bd88.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
5841d705630e45cb05e50892dd17b4bb8b67779e7c820980ac33831d01e0bd88.exe
Resource
win10v2004-20230915-en
General
-
Target
5841d705630e45cb05e50892dd17b4bb8b67779e7c820980ac33831d01e0bd88.exe
-
Size
7.4MB
-
MD5
fd292151adadb26d66a255ec04232144
-
SHA1
0110a2cc73156ab39609251109638f27c34b84f3
-
SHA256
5841d705630e45cb05e50892dd17b4bb8b67779e7c820980ac33831d01e0bd88
-
SHA512
ae84b9233529beba2a70d2269901703b1531ed87bf73d9a70c10dff4e63600505169d11791246bd59b7ad5b2bc2fbc97e776feeb457c7fb2381f1445737d6369
-
SSDEEP
98304:NM+zcTBndm7eHpfuvACRLTpJR+IjBwZc4Bf4vJEYlmNAanm2gk2v8RNWUk9y+40j:WG7eRBsQIlUl4Ww6Aanm2gk2vh7s
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 3016 5841d705630e45cb05e50892dd17b4bb8b67779e7c820980ac33831d01e0bd88.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3016 5841d705630e45cb05e50892dd17b4bb8b67779e7c820980ac33831d01e0bd88.exe 3016 5841d705630e45cb05e50892dd17b4bb8b67779e7c820980ac33831d01e0bd88.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\5841d705630e45cb05e50892dd17b4bb8b67779e7c820980ac33831d01e0bd88.exe"C:\Users\Admin\AppData\Local\Temp\5841d705630e45cb05e50892dd17b4bb8b67779e7c820980ac33831d01e0bd88.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:3016