Analysis
-
max time kernel
119s -
max time network
147s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
10/10/2023, 21:12
Static task
static1
Behavioral task
behavioral1
Sample
2f088390a5571602cba663261689aa1622f786d56d33892696abefa43f6d7492.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2f088390a5571602cba663261689aa1622f786d56d33892696abefa43f6d7492.exe
Resource
win10v2004-20230915-en
General
-
Target
2f088390a5571602cba663261689aa1622f786d56d33892696abefa43f6d7492.exe
-
Size
3.3MB
-
MD5
4f0412731d1182f62904e0c78e26f66e
-
SHA1
ca6997172a75b2dd7c1f18db84ee98edd99e3495
-
SHA256
2f088390a5571602cba663261689aa1622f786d56d33892696abefa43f6d7492
-
SHA512
32b3bfe7084a0ea7cac709a6ccfecb20bef13ebf02e0f7efac34b8610e238c2cb212b256c69cd69e4d5b6240bc1dfa7176115b5fce72641b9cf5ede7dd7fc74e
-
SSDEEP
49152:nSl39SNxIyjjauYI9jbi8Gbz42zbiBVUF964sc+2iHKToo8leGkWL0:sNSNxIyjjHTFbl0pFA49iHKTX8WWL0
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2220-1-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2220-3-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2220-5-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2220-6-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2220-7-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2220-11-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2220-15-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2220-17-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2220-21-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2220-25-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2220-23-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2220-19-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2220-13-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2220-9-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2220-4-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2220-27-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2220-29-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2220-31-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2220-33-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2220-37-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2220-35-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2220-39-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2220-41-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2220-43-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2220-45-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2220-47-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2220-48-0x0000000010000000-0x000000001003E000-memory.dmp upx -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2220 2f088390a5571602cba663261689aa1622f786d56d33892696abefa43f6d7492.exe 2220 2f088390a5571602cba663261689aa1622f786d56d33892696abefa43f6d7492.exe 2220 2f088390a5571602cba663261689aa1622f786d56d33892696abefa43f6d7492.exe