Analysis
-
max time kernel
122s -
max time network
138s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
11/10/2023, 15:33
Static task
static1
Behavioral task
behavioral1
Sample
b3fca3a092b1c2a9d7ee305877ae51fe11b7803d861e4b3fff65f1cc158c4ec6.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
b3fca3a092b1c2a9d7ee305877ae51fe11b7803d861e4b3fff65f1cc158c4ec6.exe
Resource
win10v2004-20230915-en
General
-
Target
b3fca3a092b1c2a9d7ee305877ae51fe11b7803d861e4b3fff65f1cc158c4ec6.exe
-
Size
1.2MB
-
MD5
a641fd6b534bbce701478c09b924b351
-
SHA1
09e00e0084faaeec1775e1e21c4c0bab562bd632
-
SHA256
b3fca3a092b1c2a9d7ee305877ae51fe11b7803d861e4b3fff65f1cc158c4ec6
-
SHA512
e1b502e9834ef689523ce1b1fb8a1fe0bf82edee28de7e172945e3ac1d6c19cf0a2673a07c29265a989c9b605fa28032bbe776a2e341e1679722a893a8bef7c0
-
SSDEEP
24576:eCMsfmMxXyLRjlGEGIoBPAt2t9SzOGPYUgDLvHG3:ecftORjnjmIt2fSahv
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 2232 b3fca3a092b1c2a9d7ee305877ae51fe11b7803d861e4b3fff65f1cc158c4ec6.exe -
Suspicious behavior: RenamesItself 1 IoCs
pid Process 2232 b3fca3a092b1c2a9d7ee305877ae51fe11b7803d861e4b3fff65f1cc158c4ec6.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2232 b3fca3a092b1c2a9d7ee305877ae51fe11b7803d861e4b3fff65f1cc158c4ec6.exe 2232 b3fca3a092b1c2a9d7ee305877ae51fe11b7803d861e4b3fff65f1cc158c4ec6.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\b3fca3a092b1c2a9d7ee305877ae51fe11b7803d861e4b3fff65f1cc158c4ec6.exe"C:\Users\Admin\AppData\Local\Temp\b3fca3a092b1c2a9d7ee305877ae51fe11b7803d861e4b3fff65f1cc158c4ec6.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: RenamesItself
- Suspicious use of SetWindowsHookEx
PID:2232