Analysis
-
max time kernel
150s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
25/12/2023, 23:53
Behavioral task
behavioral1
Sample
447d1425907bcfc3b845cdf0ead218b4.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
447d1425907bcfc3b845cdf0ead218b4.exe
Resource
win10v2004-20231215-en
3 signatures
150 seconds
General
-
Target
447d1425907bcfc3b845cdf0ead218b4.exe
-
Size
1.9MB
-
MD5
447d1425907bcfc3b845cdf0ead218b4
-
SHA1
cf45aad3208f31e5e061d439c59dd87a772e9531
-
SHA256
14b90bb1d016c5dd774ef783f7284ee5b981730092fe999ef4021ef761387640
-
SHA512
f8dfba73fcb40d56c38901447c19d3c1d5a810f224e4f5fc956d12b717dbadd584be52b157b52d0d40b8e8550a4da2b28a5218766beee68b2049bf14b388e5b5
-
SSDEEP
49152:fcOCdWc5Mox+cy5ZVPG0bB+plVTl0sTtIUDpesFL06mVzv9:frGWgG5ZVPGbp/IsFL06sv9
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2852-0-0x0000000000400000-0x000000000042C000-memory.dmp upx behavioral1/memory/2852-1-0x0000000000400000-0x000000000042C000-memory.dmp upx behavioral1/memory/2852-2-0x0000000000400000-0x000000000042C000-memory.dmp upx behavioral1/memory/2852-3-0x0000000000400000-0x000000000042C000-memory.dmp upx behavioral1/memory/2852-4-0x0000000000400000-0x000000000042C000-memory.dmp upx behavioral1/memory/2852-5-0x0000000000400000-0x000000000042C000-memory.dmp upx behavioral1/memory/2852-6-0x0000000000400000-0x000000000042C000-memory.dmp upx behavioral1/memory/2852-7-0x0000000000400000-0x000000000042C000-memory.dmp upx behavioral1/memory/2852-8-0x0000000000400000-0x000000000042C000-memory.dmp upx behavioral1/memory/2852-9-0x0000000000400000-0x000000000042C000-memory.dmp upx behavioral1/memory/2852-10-0x0000000000400000-0x000000000042C000-memory.dmp upx behavioral1/memory/2852-11-0x0000000000400000-0x000000000042C000-memory.dmp upx behavioral1/memory/2852-12-0x0000000000400000-0x000000000042C000-memory.dmp upx behavioral1/memory/2852-13-0x0000000000400000-0x000000000042C000-memory.dmp upx behavioral1/memory/2852-14-0x0000000000400000-0x000000000042C000-memory.dmp upx behavioral1/memory/2852-15-0x0000000000400000-0x000000000042C000-memory.dmp upx -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2852 447d1425907bcfc3b845cdf0ead218b4.exe 2852 447d1425907bcfc3b845cdf0ead218b4.exe 2852 447d1425907bcfc3b845cdf0ead218b4.exe