Analysis
-
max time kernel
121s -
max time network
130s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
14-10-2023 01:14
Static task
static1
Behavioral task
behavioral1
Sample
1d47224ee2b3eb0d800184d7bafd92ae95b04a9ad5fe45dd1c2429b21ed4e3b8.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
1d47224ee2b3eb0d800184d7bafd92ae95b04a9ad5fe45dd1c2429b21ed4e3b8.exe
Resource
win10v2004-20230915-en
General
-
Target
1d47224ee2b3eb0d800184d7bafd92ae95b04a9ad5fe45dd1c2429b21ed4e3b8.exe
-
Size
4.3MB
-
MD5
ddfddaf1c9e8b3edd11bbb3d5b92e9a8
-
SHA1
345d5e1e1124eb346183de6aa7d09e55e125a7b1
-
SHA256
1d47224ee2b3eb0d800184d7bafd92ae95b04a9ad5fe45dd1c2429b21ed4e3b8
-
SHA512
4990a42c705522bbad290eac07da74fe5782f79bcd5b8eca561fdd952964e9710c961b9f9660ed24b012da6b56e39fa8570594c47fe56f4e7ae986659bc76c17
-
SSDEEP
49152:71aTp6eRzmjgfEU02WX5NLXJ+6GK7y8pVOJtwbJTtajNS1ooRAOpMf11+s8KuqG2:kTUeRajgEUIX5VXM6D7/OJCzJBAUZL
Malware Config
Signatures
-
Drops file in Windows directory 1 IoCs
description ioc Process File created C:\Windows\libeay32.dll 1d47224ee2b3eb0d800184d7bafd92ae95b04a9ad5fe45dd1c2429b21ed4e3b8.exe -
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 1448 1d47224ee2b3eb0d800184d7bafd92ae95b04a9ad5fe45dd1c2429b21ed4e3b8.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1448 1d47224ee2b3eb0d800184d7bafd92ae95b04a9ad5fe45dd1c2429b21ed4e3b8.exe 1448 1d47224ee2b3eb0d800184d7bafd92ae95b04a9ad5fe45dd1c2429b21ed4e3b8.exe 1448 1d47224ee2b3eb0d800184d7bafd92ae95b04a9ad5fe45dd1c2429b21ed4e3b8.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\1d47224ee2b3eb0d800184d7bafd92ae95b04a9ad5fe45dd1c2429b21ed4e3b8.exe"C:\Users\Admin\AppData\Local\Temp\1d47224ee2b3eb0d800184d7bafd92ae95b04a9ad5fe45dd1c2429b21ed4e3b8.exe"1⤵
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:1448