Analysis
-
max time kernel
140s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
10/10/2023, 05:18
Static task
static1
Behavioral task
behavioral1
Sample
2545fed7b0cab7acf397cbd018c829f8ad30395401790a54466eb4e4abde71e0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2545fed7b0cab7acf397cbd018c829f8ad30395401790a54466eb4e4abde71e0.exe
Resource
win10v2004-20230915-en
General
-
Target
2545fed7b0cab7acf397cbd018c829f8ad30395401790a54466eb4e4abde71e0.exe
-
Size
3.9MB
-
MD5
2b37f85301e55e6bd4ef2a23da952e0c
-
SHA1
94bf664fad22507eebf548c1c6c8e5a85a02807f
-
SHA256
2545fed7b0cab7acf397cbd018c829f8ad30395401790a54466eb4e4abde71e0
-
SHA512
6c962d22fcfe4eaf21c903d876c5d32fda3fdb1d67d3117c4b30ad88632cb15d822e2f1e50178078ab150505b5c6c677e29a67308b470b861b953f198231338b
-
SSDEEP
49152:vakDrF1pVnlG4j+vOPkaYyfHuHyL7Ix+29uWV9D489o+s8KuqGaX0ToIBAUZLYyd:vp1pVnlG4KvYkaBH/L091PM+7JBAUZLh
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4872 2545fed7b0cab7acf397cbd018c829f8ad30395401790a54466eb4e4abde71e0.exe 4872 2545fed7b0cab7acf397cbd018c829f8ad30395401790a54466eb4e4abde71e0.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4872 2545fed7b0cab7acf397cbd018c829f8ad30395401790a54466eb4e4abde71e0.exe 4872 2545fed7b0cab7acf397cbd018c829f8ad30395401790a54466eb4e4abde71e0.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2545fed7b0cab7acf397cbd018c829f8ad30395401790a54466eb4e4abde71e0.exe"C:\Users\Admin\AppData\Local\Temp\2545fed7b0cab7acf397cbd018c829f8ad30395401790a54466eb4e4abde71e0.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4872