Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
21/10/2023, 14:44
Static task
static1
Behavioral task
behavioral1
Sample
04707e169a7b0f3becab24be2273d7a3d55183372643d684ffa736001dc02ec7.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
04707e169a7b0f3becab24be2273d7a3d55183372643d684ffa736001dc02ec7.exe
Resource
win10v2004-20231020-en
General
-
Target
04707e169a7b0f3becab24be2273d7a3d55183372643d684ffa736001dc02ec7.exe
-
Size
2.0MB
-
MD5
5e111ce02ce42e49f811816c23d41885
-
SHA1
f5db09d831d15caf81db06fe1c6006e21335f55f
-
SHA256
04707e169a7b0f3becab24be2273d7a3d55183372643d684ffa736001dc02ec7
-
SHA512
08e5a6861e89d8c762d458f410f89a4a65eac7eee2be60e781da2c127878b01e2031a61afe971009266fb224f99385ac82f3f849060c4dbaf29e51fdafcb0537
-
SSDEEP
24576:JzbSQPnlZ+Gy6kKE2PLp1Qg2bv/t4vafv35ifGhkOT63/K/t4vafv+:VWQPn7kKRLHQg2DwpfGhkOrwd
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2412-0-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2412-1-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2412-5-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2412-3-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2412-2-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2412-9-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2412-11-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2412-7-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2412-13-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2412-15-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2412-17-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2412-21-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2412-23-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2412-19-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2412-25-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2412-28-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2412-30-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2412-32-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2412-37-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2412-35-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2412-39-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2412-41-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2412-43-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2412-45-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2412-46-0x0000000000670000-0x00000000006AE000-memory.dmp upx behavioral1/memory/2412-47-0x0000000000670000-0x00000000006AE000-memory.dmp upx behavioral1/memory/2412-49-0x0000000000670000-0x00000000006AE000-memory.dmp upx behavioral1/memory/2412-48-0x0000000000670000-0x00000000006AE000-memory.dmp upx behavioral1/memory/2412-52-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2412-54-0x0000000000670000-0x00000000006AE000-memory.dmp upx behavioral1/memory/2412-51-0x0000000000670000-0x00000000006AE000-memory.dmp upx behavioral1/memory/2412-58-0x0000000000670000-0x00000000006AE000-memory.dmp upx behavioral1/memory/2412-56-0x0000000000670000-0x00000000006AE000-memory.dmp upx behavioral1/memory/2412-61-0x0000000000670000-0x00000000006AE000-memory.dmp upx behavioral1/memory/2412-63-0x0000000000670000-0x00000000006AE000-memory.dmp upx behavioral1/memory/2412-65-0x0000000000670000-0x00000000006AE000-memory.dmp upx behavioral1/memory/2412-68-0x0000000000670000-0x00000000006AE000-memory.dmp upx behavioral1/memory/2412-70-0x0000000000670000-0x00000000006AE000-memory.dmp upx behavioral1/memory/2412-73-0x0000000000670000-0x00000000006AE000-memory.dmp upx behavioral1/memory/2412-78-0x0000000000670000-0x00000000006AE000-memory.dmp upx behavioral1/memory/2412-81-0x0000000000670000-0x00000000006AE000-memory.dmp upx behavioral1/memory/2412-84-0x0000000000670000-0x00000000006AE000-memory.dmp upx behavioral1/memory/2412-86-0x0000000000670000-0x00000000006AE000-memory.dmp upx behavioral1/memory/2412-89-0x0000000000670000-0x00000000006AE000-memory.dmp upx behavioral1/memory/2412-92-0x0000000000670000-0x00000000006AE000-memory.dmp upx behavioral1/memory/2412-95-0x0000000000670000-0x00000000006AE000-memory.dmp upx behavioral1/memory/2412-98-0x0000000000670000-0x00000000006AE000-memory.dmp upx behavioral1/memory/2412-101-0x0000000000670000-0x00000000006AE000-memory.dmp upx behavioral1/memory/2412-103-0x0000000000670000-0x00000000006AE000-memory.dmp upx behavioral1/memory/2412-104-0x0000000000670000-0x00000000006AE000-memory.dmp upx behavioral1/memory/2412-105-0x0000000000670000-0x00000000006AE000-memory.dmp upx -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2412 04707e169a7b0f3becab24be2273d7a3d55183372643d684ffa736001dc02ec7.exe 2412 04707e169a7b0f3becab24be2273d7a3d55183372643d684ffa736001dc02ec7.exe 2412 04707e169a7b0f3becab24be2273d7a3d55183372643d684ffa736001dc02ec7.exe 2412 04707e169a7b0f3becab24be2273d7a3d55183372643d684ffa736001dc02ec7.exe