Analysis
-
max time kernel
11s -
max time network
121s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
24-12-2023 21:25
Behavioral task
behavioral1
Sample
12e635f204053c6841d7386cf0aaa80e.exe
Resource
win7-20231129-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
12e635f204053c6841d7386cf0aaa80e.exe
Resource
win10v2004-20231222-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
12e635f204053c6841d7386cf0aaa80e.exe
-
Size
556KB
-
MD5
12e635f204053c6841d7386cf0aaa80e
-
SHA1
524ccbe827a15acfba11da0dc9aebf32116821f8
-
SHA256
d47c698876a93e5921c388586a7e10b9da3e950cf302be7fff7ae56430c16c15
-
SHA512
f913d5af623eca6044caa1bde97f1b6bc2e73e9112b30fdfd13367a54301669cb13ed82043fa4a5c9a8dea6d5065d9f73a0a0864e3b62f46de7faf4c9981020f
-
SSDEEP
12288:PpYre6tyKfrgBoaDOy2cjQCp/Spbp/Cu+TfivVu/RO6rrwhXHTj3YoS:PpYq6MKkxOyFtlYpGudiROqgf3
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/2952-0-0x0000000000400000-0x00000000005F2000-memory.dmp upx behavioral2/memory/2952-5-0x0000000000400000-0x00000000005F2000-memory.dmp upx behavioral2/memory/2952-6-0x0000000000400000-0x00000000005F2000-memory.dmp upx behavioral2/memory/2952-4-0x0000000000400000-0x00000000005F2000-memory.dmp upx behavioral2/memory/2952-3-0x0000000000400000-0x00000000005F2000-memory.dmp upx behavioral2/memory/2952-2-0x0000000000400000-0x00000000005F2000-memory.dmp upx behavioral2/memory/2952-32-0x0000000000400000-0x00000000005F2000-memory.dmp upx -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2952 12e635f204053c6841d7386cf0aaa80e.exe 2952 12e635f204053c6841d7386cf0aaa80e.exe