Analysis
-
max time kernel
141s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system -
submitted
21/11/2023, 16:07
Static task
static1
Behavioral task
behavioral1
Sample
cdab2f7f4d58f0fe718b8d1c83c904839c583a15e1ceff69b86c242166b6d2aa.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
cdab2f7f4d58f0fe718b8d1c83c904839c583a15e1ceff69b86c242166b6d2aa.exe
Resource
win10v2004-20231020-en
General
-
Target
cdab2f7f4d58f0fe718b8d1c83c904839c583a15e1ceff69b86c242166b6d2aa.exe
-
Size
1.4MB
-
MD5
e009e8280f44aa1f2df093c8c971c7c0
-
SHA1
48fbc70f1c9746c6216b0f4d5dc6d009dde87fcb
-
SHA256
cdab2f7f4d58f0fe718b8d1c83c904839c583a15e1ceff69b86c242166b6d2aa
-
SHA512
3dc8925e5b03a75dc7f2e433770e04371e2ab6232ced534b71210a2c762548c269d2f3c63226cddfa2af4a2ed694d64da4e5577812847380d13eb17a5bf06258
-
SSDEEP
24576:8QA2rlwLEzz6iIXnBV6mblRZs6QibqMqfsKWsR38PSr77dzo1ReYk++U21cUK:8okEz5w6mPQEqf5WsNr77dk1TrsCU
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 1948 cdab2f7f4d58f0fe718b8d1c83c904839c583a15e1ceff69b86c242166b6d2aa.exe 1948 cdab2f7f4d58f0fe718b8d1c83c904839c583a15e1ceff69b86c242166b6d2aa.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1948 cdab2f7f4d58f0fe718b8d1c83c904839c583a15e1ceff69b86c242166b6d2aa.exe 1948 cdab2f7f4d58f0fe718b8d1c83c904839c583a15e1ceff69b86c242166b6d2aa.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\cdab2f7f4d58f0fe718b8d1c83c904839c583a15e1ceff69b86c242166b6d2aa.exe"C:\Users\Admin\AppData\Local\Temp\cdab2f7f4d58f0fe718b8d1c83c904839c583a15e1ceff69b86c242166b6d2aa.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:1948