Analysis
-
max time kernel
121s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20231025-en -
resource tags
arch:x64arch:x86image:win7-20231025-enlocale:en-usos:windows7-x64system -
submitted
23-11-2023 11:00
Static task
static1
Behavioral task
behavioral1
Sample
e06c48f7b352f37b966bb594fac6d6eebf4b9d18a4644dbb14ac36555097fe1e.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
e06c48f7b352f37b966bb594fac6d6eebf4b9d18a4644dbb14ac36555097fe1e.exe
Resource
win10v2004-20231023-en
General
-
Target
e06c48f7b352f37b966bb594fac6d6eebf4b9d18a4644dbb14ac36555097fe1e.exe
-
Size
1.3MB
-
MD5
4f98746ea5d5b34a13f84052161d0098
-
SHA1
4c96312bc46dedea246f72143efeb8d82dc43652
-
SHA256
e06c48f7b352f37b966bb594fac6d6eebf4b9d18a4644dbb14ac36555097fe1e
-
SHA512
afad8fa0d2b15cebc83a0c02e3e7d21fbbc43676d6bbf5c8d22b6c95ad8ea5ca0e47dc99e5f52f9f4663ec4ef2ad34c9544056d37b20e6ae284be4c6a2f07056
-
SSDEEP
24576:dS5N71Eux+WppZp0HXQJmwGKM+5se3WnQ/bZ5:M5N7dEWppHBuKMs//b
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 2472 e06c48f7b352f37b966bb594fac6d6eebf4b9d18a4644dbb14ac36555097fe1e.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2472 e06c48f7b352f37b966bb594fac6d6eebf4b9d18a4644dbb14ac36555097fe1e.exe 2472 e06c48f7b352f37b966bb594fac6d6eebf4b9d18a4644dbb14ac36555097fe1e.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\e06c48f7b352f37b966bb594fac6d6eebf4b9d18a4644dbb14ac36555097fe1e.exe"C:\Users\Admin\AppData\Local\Temp\e06c48f7b352f37b966bb594fac6d6eebf4b9d18a4644dbb14ac36555097fe1e.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:2472