Analysis
-
max time kernel
119s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system -
submitted
29/10/2023, 09:38
Static task
static1
Behavioral task
behavioral1
Sample
c982a3c12468c73198bb615d3f4bcf6b18685c8fb5c1d7351677aea274fbb390.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
c982a3c12468c73198bb615d3f4bcf6b18685c8fb5c1d7351677aea274fbb390.exe
Resource
win10v2004-20231025-en
General
-
Target
c982a3c12468c73198bb615d3f4bcf6b18685c8fb5c1d7351677aea274fbb390.exe
-
Size
11.2MB
-
MD5
f1d6a6c30afdb4d933587e5f3536f5ad
-
SHA1
50928d4e6cec9f6551a5cd8dd7bcad731cd46655
-
SHA256
c982a3c12468c73198bb615d3f4bcf6b18685c8fb5c1d7351677aea274fbb390
-
SHA512
4b7a10663f5956656235503c744dd8e4be842dd0f428494f0817e2c8433a8a38977a5a2430829ee07cab79067d061187d9534f0f819d8ba5516b3ff4b6726d02
-
SSDEEP
196608:+jG4J8JqKek0YVt6/JRDVcNgg3QIKhr4znXRX5bUoKK:9PJqkDVofDGeg3RznXxdUx
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 896 c982a3c12468c73198bb615d3f4bcf6b18685c8fb5c1d7351677aea274fbb390.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 896 c982a3c12468c73198bb615d3f4bcf6b18685c8fb5c1d7351677aea274fbb390.exe 896 c982a3c12468c73198bb615d3f4bcf6b18685c8fb5c1d7351677aea274fbb390.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\c982a3c12468c73198bb615d3f4bcf6b18685c8fb5c1d7351677aea274fbb390.exe"C:\Users\Admin\AppData\Local\Temp\c982a3c12468c73198bb615d3f4bcf6b18685c8fb5c1d7351677aea274fbb390.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:896