Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
07/12/2023, 10:27
Behavioral task
behavioral1
Sample
08502acb78bbd00ef679593e152fb7637dbde654a1c542e40de8d03a2f750540.exe
Resource
win7-20231129-en
4 signatures
150 seconds
General
-
Target
08502acb78bbd00ef679593e152fb7637dbde654a1c542e40de8d03a2f750540.exe
-
Size
8.2MB
-
MD5
b24dbc2014faa229ab80b5e891137a49
-
SHA1
f004e7a4cd8649bc74e12edf322243e2a5e794d6
-
SHA256
08502acb78bbd00ef679593e152fb7637dbde654a1c542e40de8d03a2f750540
-
SHA512
cb78d7f7fcff2f13e590ac6f60ca8d05329587815a73df8a30eb8eb6953332bd83ea5a10555af96cf4851f3c33bbf306c887bd8ebc7bae5cf4683e811d463277
-
SSDEEP
196608:czGHLnxSqXBY4tRekoakad5xSgra1NhTqxWLOcWFsRcj+9uL:KG3XBj0koNS5Igra1/qxabK+UL
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2356-42-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2356-40-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2356-43-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2356-45-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2356-46-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2356-50-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2356-53-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2356-63-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2356-61-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2356-65-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2356-59-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2356-68-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2356-71-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2356-57-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2356-55-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2356-77-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2356-78-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2356-48-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2356-94-0x0000000010000000-0x000000001003E000-memory.dmp upx behavioral1/memory/2356-88-0x0000000010000000-0x000000001003E000-memory.dmp upx -
resource yara_rule behavioral1/memory/2356-2-0x0000000000400000-0x0000000001355000-memory.dmp vmprotect behavioral1/memory/2356-73-0x0000000000400000-0x0000000001355000-memory.dmp vmprotect -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2356 08502acb78bbd00ef679593e152fb7637dbde654a1c542e40de8d03a2f750540.exe 2356 08502acb78bbd00ef679593e152fb7637dbde654a1c542e40de8d03a2f750540.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2356 08502acb78bbd00ef679593e152fb7637dbde654a1c542e40de8d03a2f750540.exe 2356 08502acb78bbd00ef679593e152fb7637dbde654a1c542e40de8d03a2f750540.exe 2356 08502acb78bbd00ef679593e152fb7637dbde654a1c542e40de8d03a2f750540.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\08502acb78bbd00ef679593e152fb7637dbde654a1c542e40de8d03a2f750540.exe"C:\Users\Admin\AppData\Local\Temp\08502acb78bbd00ef679593e152fb7637dbde654a1c542e40de8d03a2f750540.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:2356