Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20231023-en -
resource tags
arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system -
submitted
23-11-2023 21:03
Static task
static1
Behavioral task
behavioral1
Sample
ad17545f88bd79deccde9cf365a9fa361ea74d304df8cfa7ba906dc50c396313.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
ad17545f88bd79deccde9cf365a9fa361ea74d304df8cfa7ba906dc50c396313.exe
Resource
win10v2004-20231020-en
General
-
Target
ad17545f88bd79deccde9cf365a9fa361ea74d304df8cfa7ba906dc50c396313.exe
-
Size
4.7MB
-
MD5
c7666ecadde09b2494f51375cb0b06e4
-
SHA1
d4d1af37283e28ce0e16c1a35540bd423506124b
-
SHA256
ad17545f88bd79deccde9cf365a9fa361ea74d304df8cfa7ba906dc50c396313
-
SHA512
62d6c372ab02eba5be6263a8176c8f35f7605c1143404fe26f3acfb356553c46707377048e725dc8e1e67b7d91f3abe309f185dfbc87b9850601049e93d0e813
-
SSDEEP
98304:d2XeHdZChmK2dhsD6F3Y+IUKdzOJDb4v+k:BdZL3jIDwN0v+k
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 460 ad17545f88bd79deccde9cf365a9fa361ea74d304df8cfa7ba906dc50c396313.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 460 ad17545f88bd79deccde9cf365a9fa361ea74d304df8cfa7ba906dc50c396313.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\ad17545f88bd79deccde9cf365a9fa361ea74d304df8cfa7ba906dc50c396313.exe"C:\Users\Admin\AppData\Local\Temp\ad17545f88bd79deccde9cf365a9fa361ea74d304df8cfa7ba906dc50c396313.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:460
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD53814a71fa5be4b64eaaa29917f595c28
SHA12df0348946565325cd2db479d64f201fe2eee006
SHA25607409a09cb134b598088f3316a4b1810385220e56826a9c80124bc11931df5d4
SHA512b3a8350c6dbe1a6e78e951044942fdb412d226b942b4e1a5c401685fc3053da328dc78b569a5d8662e9feb84bf0dbbade1c3bbb49f87509eaaa951125ea52db0
-
Filesize
38B
MD55599cdf98d3181685b5534410b87c359
SHA18b93fed07c521c6e9ab5402b79f027543088b0e0
SHA2569913819aa09e7758f21c6335c63ad261486daa1559e3724a85190fe99d8935d3
SHA512f2cc71bb0aa4658be0f7b03482b9a21293dc5a3cf42a5f42a3c27b5093f6c54494e40274c4780396701bf4aa0d1b52411aa164af404be0dd8a7f8547a3040af4