Analysis
-
max time kernel
0s -
max time network
145s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
25-12-2023 16:46
Behavioral task
behavioral1
Sample
2e4a5ce2b41a1619fc0dffee26964162.exe
Resource
win7-20231129-en
windows7-x64
3 signatures
150 seconds
General
-
Target
2e4a5ce2b41a1619fc0dffee26964162.exe
-
Size
556KB
-
MD5
2e4a5ce2b41a1619fc0dffee26964162
-
SHA1
c9d9fdbdd61d5cd281ed577e954e52dbbc5f499b
-
SHA256
e0f7d8aa33de49803aa306c87f5fd764c66deece40f6b4e795a8ed2afb583d90
-
SHA512
b4786b79ac4d54eff59b97241bb127b3138ea1a137805fa61ad0bacba54a0d8430c9d9486591111f12ed5c2dbf1928307c83010cfa097760a9526ba33c198551
-
SSDEEP
12288:yGMK5hQ5a9gLkEUtzQqxHQi274isouxNwH2DC9dW1m3AiiMMrb:yGj5hQ5uAkEmzvH674UuxNvC9dW1Fiir
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/3020-1-0x0000000000400000-0x0000000000521000-memory.dmp upx behavioral1/memory/3020-2-0x0000000000400000-0x0000000000521000-memory.dmp upx behavioral1/memory/3020-0-0x0000000000400000-0x0000000000521000-memory.dmp upx behavioral1/memory/3020-164-0x0000000000400000-0x0000000000521000-memory.dmp upx behavioral1/memory/3020-165-0x0000000000400000-0x0000000000521000-memory.dmp upx behavioral1/memory/3020-166-0x0000000000400000-0x0000000000521000-memory.dmp upx behavioral1/memory/3020-167-0x0000000000400000-0x0000000000521000-memory.dmp upx behavioral1/memory/3020-170-0x0000000000400000-0x0000000000521000-memory.dmp upx behavioral1/memory/3020-171-0x0000000000400000-0x0000000000521000-memory.dmp upx -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3020 2e4a5ce2b41a1619fc0dffee26964162.exe 3020 2e4a5ce2b41a1619fc0dffee26964162.exe