Analysis
-
max time kernel
142s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system -
submitted
19-11-2023 02:13
Behavioral task
behavioral1
Sample
.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
.exe
Resource
win10v2004-20231020-en
Behavioral task
behavioral3
Sample
formulario -108761.msi
Resource
win7-20231023-en
Behavioral task
behavioral4
Sample
formulario -108761.msi
Resource
win10v2004-20231023-en
General
-
Target
.exe
-
Size
1.3MB
-
MD5
4dce9a0afd4a43f7a21896f50aa2b442
-
SHA1
f915dad6ebd4276518f7d962619a3c4612b76be0
-
SHA256
e939a53fe11b0d32d9ee617f92d48fc4b409516d5c5ecfe4599a6c64d7fb1241
-
SHA512
daf5a5e4b0601f8f0b29f8292b659be41a79d7045fe0b9ffa8b71df966aac01ef5d29bcec2be4aee233926976f8708f6bb86f4639e4ee08368ac9909bfac7290
-
SSDEEP
24576:lDlfF9pRxwExoc7pZtSDBPNqig4ON4+xJX7YRk:nFDRx7V7pEPHpON4qJX7V
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4624-0-0x0000000000C00000-0x0000000000FE2000-memory.dmp upx behavioral2/memory/4624-5-0x0000000000C00000-0x0000000000FE2000-memory.dmp upx -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 4624 .exe 4624 .exe 4624 .exe 4624 .exe