Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
24-12-2023 14:26
Static task
static1
Behavioral task
behavioral1
Sample
3202a510e3e2dc556e3d50ca903139870fd4455008e7d59f4ac6434f0bf649b7.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3202a510e3e2dc556e3d50ca903139870fd4455008e7d59f4ac6434f0bf649b7.exe
Resource
win10v2004-20231215-en
General
-
Target
3202a510e3e2dc556e3d50ca903139870fd4455008e7d59f4ac6434f0bf649b7.exe
-
Size
1.4MB
-
MD5
63682039a5c9d26cf1d378083c50fcaa
-
SHA1
8caf67e9a391c28f475203fb64096c13eb64766c
-
SHA256
3202a510e3e2dc556e3d50ca903139870fd4455008e7d59f4ac6434f0bf649b7
-
SHA512
996609ea1037f3afb4f90238e0539f68eccaa958ae993fbf40fa1ba50896b3c2ead1e27608f33fa2c76461c146b8bdd93c2a325fbaa967428096ea6aaea6ec15
-
SSDEEP
24576:ymJ4Ob4p90IHkqqkme2v+r2tTxZq1Wx6MTCVKMxhiRK+1INNG36:y9nrH1W71yqdsZ
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1976 3202a510e3e2dc556e3d50ca903139870fd4455008e7d59f4ac6434f0bf649b7.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1976 3202a510e3e2dc556e3d50ca903139870fd4455008e7d59f4ac6434f0bf649b7.exe 1976 3202a510e3e2dc556e3d50ca903139870fd4455008e7d59f4ac6434f0bf649b7.exe 1976 3202a510e3e2dc556e3d50ca903139870fd4455008e7d59f4ac6434f0bf649b7.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\3202a510e3e2dc556e3d50ca903139870fd4455008e7d59f4ac6434f0bf649b7.exe"C:\Users\Admin\AppData\Local\Temp\3202a510e3e2dc556e3d50ca903139870fd4455008e7d59f4ac6434f0bf649b7.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1976