Analysis
- max time kernel
154s - max time network
162s - platform
windows10-2004_x64 - resource
win10v2004-20230915-en - resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system - submitted
12/10/2023, 00:49
Behavioral task
behavioral1
Sample
driver-hub-install__28.exe
Resource
win7-20230831-en
5 signatures
150 seconds
General
- Target driver-hub-install__28.exe
- Size 2.0MB
- Sample231012-a6jtlaeb6v
- SHA256 a914d414ff94b74b685a180608462ff13dcae3586da797c34a0eb1b02dabf828
- MD5 7177f798d7ec4dc325205fdd9c5fa753
- SHA1 accb343313902a997bfa5028fa27da69f0cc820a
- SHA512 5548a3c96175e9f674c07cb67f59ad800b43766b0e075b1f245b53f924fb024157789e4d6cb6490dc9b70c3015731417863c39d9c41f0eb1a161c5d00925dc50
- SSDEEP 49152:2FP13ycDr/sbG33MZ9w+2/+F6dtrYvVOPyUgPq:2T3y/b0H/+F6deGXd
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/3644-0-0x0000000000400000-0x0000000000FDB000-memory.dmp upx behavioral2/memory/3644-1-0x0000000000400000-0x0000000000FDB000-memory.dmp upx behavioral2/memory/3644-3-0x0000000000400000-0x0000000000FDB000-memory.dmp upx behavioral2/memory/3644-4-0x0000000000400000-0x0000000000FDB000-memory.dmp upx behavioral2/memory/3644-14-0x0000000000400000-0x0000000000FDB000-memory.dmp upx -
description ioc Process Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA driver-hub-install__28.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 3644 driver-hub-install__28.exe 3644 driver-hub-install__28.exe 3644 driver-hub-install__28.exe 3644 driver-hub-install__28.exe