Overview
overview
7Static
static
3Top Passwo...ry.exe
windows7-x64
1Top Passwo...ry.exe
windows10-2004-x64
1Top Passwo...lp.chm
windows7-x64
1Top Passwo...lp.chm
windows10-2004-x64
1Top Passwo...91.dll
windows7-x64
3Top Passwo...91.dll
windows10-2004-x64
3Top Passwo...20.dll
windows7-x64
3Top Passwo...20.dll
windows10-2004-x64
3Top Passwo...00.exe
windows7-x64
7Top Passwo...00.exe
windows10-2004-x64
7Analysis
-
max time kernel
150s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20231127-en -
resource tags
arch:x64arch:x86image:win10v2004-20231127-enlocale:en-usos:windows10-2004-x64system -
submitted
11/12/2023, 06:56
Static task
static1
Behavioral task
behavioral1
Sample
Top Password/ZIP Password Recovery.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
Top Password/ZIP Password Recovery.exe
Resource
win10v2004-20231127-en
Behavioral task
behavioral3
Sample
Top Password/ZPRHelp.chm
Resource
win7-20231023-en
Behavioral task
behavioral4
Sample
Top Password/ZPRHelp.chm
Resource
win10v2004-20231127-en
Behavioral task
behavioral5
Sample
Top Password/cudart32_91.dll
Resource
win7-20231020-en
Behavioral task
behavioral6
Sample
Top Password/cudart32_91.dll
Resource
win10v2004-20231127-en
Behavioral task
behavioral7
Sample
Top Password/msvcr120.dll
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
Top Password/msvcr120.dll
Resource
win10v2004-20231130-en
Behavioral task
behavioral9
Sample
Top Password/unins000.exe
Resource
win7-20231201-en
Behavioral task
behavioral10
Sample
Top Password/unins000.exe
Resource
win10v2004-20231201-en
General
-
Target
Top Password/ZIP Password Recovery.exe
-
Size
4.3MB
-
MD5
6cc3d1ada00e1f29f7195f4b6ff41aa4
-
SHA1
5c332d576bbdc8a0a4da63ab18109cd62b053a97
-
SHA256
6a99cdc3deb0035906acd0a0e2bfc046cf5e8a2efd1ddfe8229f9a23df5a7d75
-
SHA512
99355c754b744cbc83958ac59ab4774f43168d2d55fad2a56efc5cac5ce61c202a4d9d468c2e94d1ca5e7856abba41644fd7e001a86d72755b54e69025641659
-
SSDEEP
98304:D17nIReddjdW98QsShkE/OKTH9CtkfypvdIDbze:DK/CoV/OKTcaadOG
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 452 ZIP Password Recovery.exe 452 ZIP Password Recovery.exe