Analysis
-
max time kernel
122s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system -
submitted
15/11/2023, 15:45
Static task
static1
Behavioral task
behavioral1
Sample
6b4b47e148736428128c9c11abe154101ccd52d3df61f9f2dda89c6030e952c5.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
6b4b47e148736428128c9c11abe154101ccd52d3df61f9f2dda89c6030e952c5.exe
Resource
win10v2004-20231025-en
General
-
Target
6b4b47e148736428128c9c11abe154101ccd52d3df61f9f2dda89c6030e952c5.exe
-
Size
1.3MB
-
MD5
7fc12d7c0034f93608b27bec245b92fa
-
SHA1
834625bcd357b16c7f4624f479af4dada4483603
-
SHA256
6b4b47e148736428128c9c11abe154101ccd52d3df61f9f2dda89c6030e952c5
-
SHA512
5a6de3db2c2c2e6a2c9c3e521e67a39f9ce2c112df0ae87bb37f27e493702b4507d1e87ab4fca6d6f0b348b5b955302ce7ae3494a756048b51d39ce779115940
-
SSDEEP
24576:THrGEXhnwJzsJYKbe4Qxigqb89Fx6EEdAJ1MeLDHQC+qWW54Sa:wwe4Qotb4hx54
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 2016 6b4b47e148736428128c9c11abe154101ccd52d3df61f9f2dda89c6030e952c5.exe -
Suspicious behavior: LoadsDriver 1 IoCs
pid Process 464 Process not Found -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2016 6b4b47e148736428128c9c11abe154101ccd52d3df61f9f2dda89c6030e952c5.exe 2016 6b4b47e148736428128c9c11abe154101ccd52d3df61f9f2dda89c6030e952c5.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\6b4b47e148736428128c9c11abe154101ccd52d3df61f9f2dda89c6030e952c5.exe"C:\Users\Admin\AppData\Local\Temp\6b4b47e148736428128c9c11abe154101ccd52d3df61f9f2dda89c6030e952c5.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:2016