Analysis
-
max time kernel
159s -
max time network
133s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
25/12/2023, 19:07
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
36b186cfa20c62d3bc6b45ea4cd377ce.exe
Resource
win7-20231215-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
36b186cfa20c62d3bc6b45ea4cd377ce.exe
Resource
win10v2004-20231215-en
2 signatures
150 seconds
General
-
Target
36b186cfa20c62d3bc6b45ea4cd377ce.exe
-
Size
4.3MB
-
MD5
36b186cfa20c62d3bc6b45ea4cd377ce
-
SHA1
bfe889cd96a7056377efdc20a9a7d050a0508392
-
SHA256
93edccbceaba18566f10f763cecc652585dde2935afdf10396d708d5e8ccecd6
-
SHA512
fc7c28b89ae3922d3146affaa10760cfdefe1737d62f486ecf2b89b5517c403fdfc0fe39383fa185f8ae8e2acab0e74c3dbe22f5218a9c6ef945761ceca0537f
-
SSDEEP
98304:DwwIrequocU1ml6eVSNSNIORZFZn80iyds2RtW4Hsu9jREW5D:IrebU1leVS0C8HZ80iydsUJHxj6W5D
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2100 36b186cfa20c62d3bc6b45ea4cd377ce.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2100 36b186cfa20c62d3bc6b45ea4cd377ce.exe