Analysis
-
max time kernel
119s -
max time network
133s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
14/10/2023, 01:41
Static task
static1
Behavioral task
behavioral1
Sample
92f825b41442507b21d40e9c128e3585a94536cb7164c55c0a5bc3453a0bbfd2.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
92f825b41442507b21d40e9c128e3585a94536cb7164c55c0a5bc3453a0bbfd2.exe
Resource
win10v2004-20230915-en
General
-
Target
92f825b41442507b21d40e9c128e3585a94536cb7164c55c0a5bc3453a0bbfd2.exe
-
Size
1.2MB
-
MD5
0b284982f79548729fe500725b110b11
-
SHA1
2d1e93143e2b66405100af36d8a0681983fd1736
-
SHA256
92f825b41442507b21d40e9c128e3585a94536cb7164c55c0a5bc3453a0bbfd2
-
SHA512
0a8879b95701e0d79612b907470e59bd607c3b169eda54a04b54222fce6338be9e101fc4983ba6dc1f1b89005346d24da8dcec945dd8606906ebc994bfd12d3e
-
SSDEEP
24576:87og81OfqZ/eiq5YUvJtsNbaaXEektwzl3NLOlQDa2VGVvn9l:88QgHkS/OlUaFh
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 2132 92f825b41442507b21d40e9c128e3585a94536cb7164c55c0a5bc3453a0bbfd2.exe -
Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 2132 92f825b41442507b21d40e9c128e3585a94536cb7164c55c0a5bc3453a0bbfd2.exe 2132 92f825b41442507b21d40e9c128e3585a94536cb7164c55c0a5bc3453a0bbfd2.exe -
Suspicious use of SendNotifyMessage 2 IoCs
pid Process 2132 92f825b41442507b21d40e9c128e3585a94536cb7164c55c0a5bc3453a0bbfd2.exe 2132 92f825b41442507b21d40e9c128e3585a94536cb7164c55c0a5bc3453a0bbfd2.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2132 92f825b41442507b21d40e9c128e3585a94536cb7164c55c0a5bc3453a0bbfd2.exe 2132 92f825b41442507b21d40e9c128e3585a94536cb7164c55c0a5bc3453a0bbfd2.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\92f825b41442507b21d40e9c128e3585a94536cb7164c55c0a5bc3453a0bbfd2.exe"C:\Users\Admin\AppData\Local\Temp\92f825b41442507b21d40e9c128e3585a94536cb7164c55c0a5bc3453a0bbfd2.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2132