Analysis
-
max time kernel
150s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
12-10-2023 00:02
Static task
static1
Behavioral task
behavioral1
Sample
91f26a7b4082c33263d9b3c0ea329aa58d904707ffa547fce49751b987201fe3.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
91f26a7b4082c33263d9b3c0ea329aa58d904707ffa547fce49751b987201fe3.exe
Resource
win10v2004-20230915-en
General
-
Target
91f26a7b4082c33263d9b3c0ea329aa58d904707ffa547fce49751b987201fe3.exe
-
Size
6.3MB
-
MD5
2d0ec9987ab5b5626124434c769374d5
-
SHA1
5ddbc17c83ad96d22f1b437337c5103f81ccf9db
-
SHA256
91f26a7b4082c33263d9b3c0ea329aa58d904707ffa547fce49751b987201fe3
-
SHA512
de6e72449fc4bb11b76bbedc094b1006889f4ec153af98e80ae992c103b303934297621a8d02c2dd9e1bc20efb598a6c561335ad47a0b774927ac36d8bbd7b3d
-
SSDEEP
98304:GuCmGjnI9W9ykZ4/0n5FqWWqUi1osgiG+77/bOtIzZsm9uALfprsQ:GVjnIq4yFRnEM7/bOCzpuAd
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 1688 91f26a7b4082c33263d9b3c0ea329aa58d904707ffa547fce49751b987201fe3.exe 1688 91f26a7b4082c33263d9b3c0ea329aa58d904707ffa547fce49751b987201fe3.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1688 91f26a7b4082c33263d9b3c0ea329aa58d904707ffa547fce49751b987201fe3.exe 1688 91f26a7b4082c33263d9b3c0ea329aa58d904707ffa547fce49751b987201fe3.exe 1688 91f26a7b4082c33263d9b3c0ea329aa58d904707ffa547fce49751b987201fe3.exe 1688 91f26a7b4082c33263d9b3c0ea329aa58d904707ffa547fce49751b987201fe3.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\91f26a7b4082c33263d9b3c0ea329aa58d904707ffa547fce49751b987201fe3.exe"C:\Users\Admin\AppData\Local\Temp\91f26a7b4082c33263d9b3c0ea329aa58d904707ffa547fce49751b987201fe3.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:1688