Analysis
-
max time kernel
119s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system -
submitted
23/10/2023, 21:46
Static task
static1
Behavioral task
behavioral1
Sample
b003007e0f55356e5af442906d734f151e8e07df3f6b27eb61e057cb8dd60987.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
b003007e0f55356e5af442906d734f151e8e07df3f6b27eb61e057cb8dd60987.exe
Resource
win10v2004-20231020-en
General
-
Target
b003007e0f55356e5af442906d734f151e8e07df3f6b27eb61e057cb8dd60987.exe
-
Size
1.4MB
-
MD5
9c09c4399ba835dcf6ac876d89877600
-
SHA1
b756f672c76e027aeff509c6ece5faeeefdf4f47
-
SHA256
b003007e0f55356e5af442906d734f151e8e07df3f6b27eb61e057cb8dd60987
-
SHA512
3d5ad6ac1752fe4bb605d922a29767bd70758ddc5f1efe2c1e95df7225601b39fc3f78dc21edc46da8c563fd7b0b223a44475644b5b6f7420143f68b489b5616
-
SSDEEP
24576:fWMJvO9/Ifdd8XM4n4jEXu+fVO24tvyTmD6Wb4TXIrOhXOmF:frdof8cTeb40rN
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2104 b003007e0f55356e5af442906d734f151e8e07df3f6b27eb61e057cb8dd60987.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2104 b003007e0f55356e5af442906d734f151e8e07df3f6b27eb61e057cb8dd60987.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2104 b003007e0f55356e5af442906d734f151e8e07df3f6b27eb61e057cb8dd60987.exe 2104 b003007e0f55356e5af442906d734f151e8e07df3f6b27eb61e057cb8dd60987.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\b003007e0f55356e5af442906d734f151e8e07df3f6b27eb61e057cb8dd60987.exe"C:\Users\Admin\AppData\Local\Temp\b003007e0f55356e5af442906d734f151e8e07df3f6b27eb61e057cb8dd60987.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:2104