Analysis
-
max time kernel
150s -
max time network
164s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
12/10/2023, 02:57
Static task
static1
Behavioral task
behavioral1
Sample
b9dacdb3c6f6bd94c8ffc152638afdcf3af6345c7d48cc61aa1647ddd0803622.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
b9dacdb3c6f6bd94c8ffc152638afdcf3af6345c7d48cc61aa1647ddd0803622.exe
Resource
win10v2004-20230915-en
General
-
Target
b9dacdb3c6f6bd94c8ffc152638afdcf3af6345c7d48cc61aa1647ddd0803622.exe
-
Size
588KB
-
MD5
ca9d661c8b2f10104661d08b45a364cc
-
SHA1
a376163b2c7274ec20aa9bf667ab909c7dbb7850
-
SHA256
b9dacdb3c6f6bd94c8ffc152638afdcf3af6345c7d48cc61aa1647ddd0803622
-
SHA512
42a9b203bf854ce6c6ab53bed5f2b7502447ed2ceb8e7af1c93ae425d544808524b092f63970a8f48c32abcdec9f2f936c9c53ed3d86e641b1fd1bae116ccb21
-
SSDEEP
6144:uW+enQ1/XPzyrvKZY0ZDSDzSGO4g1HaN8YYzkc1X/tPaQrvmAEYLWqxVukPjq/G9:uxTNQvdSDSDzSNVbtltPac7E1A
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 4132 b9dacdb3c6f6bd94c8ffc152638afdcf3af6345c7d48cc61aa1647ddd0803622.exe 4132 b9dacdb3c6f6bd94c8ffc152638afdcf3af6345c7d48cc61aa1647ddd0803622.exe 4132 b9dacdb3c6f6bd94c8ffc152638afdcf3af6345c7d48cc61aa1647ddd0803622.exe 4132 b9dacdb3c6f6bd94c8ffc152638afdcf3af6345c7d48cc61aa1647ddd0803622.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4132 b9dacdb3c6f6bd94c8ffc152638afdcf3af6345c7d48cc61aa1647ddd0803622.exe 4132 b9dacdb3c6f6bd94c8ffc152638afdcf3af6345c7d48cc61aa1647ddd0803622.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\b9dacdb3c6f6bd94c8ffc152638afdcf3af6345c7d48cc61aa1647ddd0803622.exe"C:\Users\Admin\AppData\Local\Temp\b9dacdb3c6f6bd94c8ffc152638afdcf3af6345c7d48cc61aa1647ddd0803622.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4132