Analysis
-
max time kernel
123s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system -
submitted
01/11/2023, 22:00
Static task
static1
Behavioral task
behavioral1
Sample
904037ec6e701592281d2e80114998490bb714cb1202ced2d3405b7a53c7f643.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
904037ec6e701592281d2e80114998490bb714cb1202ced2d3405b7a53c7f643.exe
Resource
win10v2004-20231023-en
General
-
Target
904037ec6e701592281d2e80114998490bb714cb1202ced2d3405b7a53c7f643.exe
-
Size
1.5MB
-
MD5
343f371d58f488fcebc58ac151c8aefd
-
SHA1
f26754f46b7c58141d0e3c1ccc3eeeeb3f09dde4
-
SHA256
904037ec6e701592281d2e80114998490bb714cb1202ced2d3405b7a53c7f643
-
SHA512
c17433211351bded4eda289d2cef5bcca26e5a300802fb2edb59a10eb0fd28d2da53699c8e845ee13e54dd1edac636c0c60cd70b8f2ec58c6ca593bb3d772fa7
-
SSDEEP
24576:mukAL8gVxxrwa0po/dVF7gPpxwpvwhRW8tOS70ZxrrdcUZJowPP8KPiLb5a2cK1N:m6T1LZ1gPw6aY+ZhZXPw51CmprTMs
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4120 904037ec6e701592281d2e80114998490bb714cb1202ced2d3405b7a53c7f643.exe 4120 904037ec6e701592281d2e80114998490bb714cb1202ced2d3405b7a53c7f643.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4120 904037ec6e701592281d2e80114998490bb714cb1202ced2d3405b7a53c7f643.exe 4120 904037ec6e701592281d2e80114998490bb714cb1202ced2d3405b7a53c7f643.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\904037ec6e701592281d2e80114998490bb714cb1202ced2d3405b7a53c7f643.exe"C:\Users\Admin\AppData\Local\Temp\904037ec6e701592281d2e80114998490bb714cb1202ced2d3405b7a53c7f643.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4120