Analysis
-
max time kernel
121s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system -
submitted
11/12/2023, 18:00
Static task
static1
Behavioral task
behavioral1
Sample
5ad9f94f3332c1f6a6f7d97b85cb39a61d8da0ae4175fa7f739b20605ee4c234.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
5ad9f94f3332c1f6a6f7d97b85cb39a61d8da0ae4175fa7f739b20605ee4c234.exe
Resource
win10v2004-20231127-en
General
-
Target
5ad9f94f3332c1f6a6f7d97b85cb39a61d8da0ae4175fa7f739b20605ee4c234.exe
-
Size
4.7MB
-
MD5
df8636e5487b0307a06a5ce4df693bd7
-
SHA1
3f3ded49701b007b95e14279777f2b1c149439d1
-
SHA256
5ad9f94f3332c1f6a6f7d97b85cb39a61d8da0ae4175fa7f739b20605ee4c234
-
SHA512
f4e6b8dac3db95b8ccde59bbbc75718541ff4fccfbf0a1797f4c445822c19bf927f8ef2279c7ec774f61094a72afcfc4f223650ef082b8128337829694de0547
-
SSDEEP
49152:dc2XwJXdAk1PBOldp9rEbjB/hKTYYd6zTaMubLmjVPU5+r5u8QeKxFOJxdb4vZKN:pXwJNf1pip9AbjBwsaMW6KdzOJDb4v+
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1684 5ad9f94f3332c1f6a6f7d97b85cb39a61d8da0ae4175fa7f739b20605ee4c234.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1684 5ad9f94f3332c1f6a6f7d97b85cb39a61d8da0ae4175fa7f739b20605ee4c234.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\5ad9f94f3332c1f6a6f7d97b85cb39a61d8da0ae4175fa7f739b20605ee4c234.exe"C:\Users\Admin\AppData\Local\Temp\5ad9f94f3332c1f6a6f7d97b85cb39a61d8da0ae4175fa7f739b20605ee4c234.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1684
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5KB
MD5b0723e4ee7c8e121b2f8a4f12ca05194
SHA1c81ce5be0cd60ce93f834e38299954e7f5a57be7
SHA256a01d1dd843ac008bb2c207a26a3d872a7141af36f51efad8c0f85dc58902aebc
SHA51204dc434d1bafeb3500a04ee1e4d5655e46760c75b64e1d25f900396b343a6662d1191388ecbe84be946a49d946bbabebeb0876a95def7a8b189b9fc5baae0e19
-
Filesize
38B
MD514dbda277cdaae1aec0b35a9455e37cf
SHA1dbf05b5941e2a718af7df52e96b4cf22ed754a1f
SHA256880d47e8b00afb1b592d32a9aeb0b802ca5a97b5fe2235f2bd310dccfc6cb64b
SHA512991187cd6395c74f6ebbfbdf93cd3a6fc120824f1dd08efc9007965626808deea9de66d83115d9985465c7c48c7d9cf9ba9fe61024fe2450c7f036245958c618