Analysis
-
max time kernel
140s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
11-10-2023 15:30
Static task
static1
Behavioral task
behavioral1
Sample
64d37d54585e03bfacfe4449d32060f6bec25a23d4a38c7de7ab364869f7c20c.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
64d37d54585e03bfacfe4449d32060f6bec25a23d4a38c7de7ab364869f7c20c.exe
Resource
win10v2004-20230915-en
General
-
Target
64d37d54585e03bfacfe4449d32060f6bec25a23d4a38c7de7ab364869f7c20c.exe
-
Size
13.5MB
-
MD5
16a5cd5c52e7e3ff050c5c4dcd1dde5f
-
SHA1
dcdb30fdb3f2b3f127e17c659346ebd8be07dcb8
-
SHA256
64d37d54585e03bfacfe4449d32060f6bec25a23d4a38c7de7ab364869f7c20c
-
SHA512
7a6f04f138579ba059fe393c085a5164e770d42fcb958052c13b0fe2e4cb2ccbfc4895c0aecf7bc1e1e8607a3bbf3e6c7690bd084bd0249b4ce99577df6bf599
-
SSDEEP
393216:t4Gxbd+Hzqk0ei1+0ei17gKqzx0ei1+0ei1o:t4Gxbd+HOkAQAuzxAQA+
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4068 64d37d54585e03bfacfe4449d32060f6bec25a23d4a38c7de7ab364869f7c20c.exe 4068 64d37d54585e03bfacfe4449d32060f6bec25a23d4a38c7de7ab364869f7c20c.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4068 64d37d54585e03bfacfe4449d32060f6bec25a23d4a38c7de7ab364869f7c20c.exe 4068 64d37d54585e03bfacfe4449d32060f6bec25a23d4a38c7de7ab364869f7c20c.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\64d37d54585e03bfacfe4449d32060f6bec25a23d4a38c7de7ab364869f7c20c.exe"C:\Users\Admin\AppData\Local\Temp\64d37d54585e03bfacfe4449d32060f6bec25a23d4a38c7de7ab364869f7c20c.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4068