Analysis
-
max time kernel
120s -
max time network
180s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
24-12-2023 20:10
Static task
static1
Behavioral task
behavioral1
Sample
0fff1d6380681e44de524b364b804420.exe
Resource
win7-20231215-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
0fff1d6380681e44de524b364b804420.exe
Resource
win10v2004-20231222-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
0fff1d6380681e44de524b364b804420.exe
-
Size
201KB
-
MD5
0fff1d6380681e44de524b364b804420
-
SHA1
7478ac7568233ae6ed286ae5a3614ff0752898c6
-
SHA256
9923f667d90a202efb9a0724ffbd417739a7bcda43ab91eeb4b89eaff2c3eef3
-
SHA512
76f0b1eda08debc8a0b7140577da5662c2bd7804c22ad9824f89afe5eb32160324d6525572ee724b9e80add40905c4ad04d8af82f7695dde6bc70f5d04db5f43
-
SSDEEP
6144:3LprOcD1xM47KzlfgR0hAycYQYI9m2NtgvPS:b8cxf2zlfgR0hAycYQYI9m2NtgvPS
Score
6/10
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\Main 0fff1d6380681e44de524b364b804420.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2756 0fff1d6380681e44de524b364b804420.exe 2756 0fff1d6380681e44de524b364b804420.exe