Analysis
-
max time kernel
150s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
26-12-2023 08:13
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
5ed8f9837590b396ee9bff40bcbc3fa5.exe
Resource
win7-20231215-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
5ed8f9837590b396ee9bff40bcbc3fa5.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
5ed8f9837590b396ee9bff40bcbc3fa5.exe
-
Size
2.1MB
-
MD5
5ed8f9837590b396ee9bff40bcbc3fa5
-
SHA1
069d591fe884eef71cb6e04241d6ae2c70445239
-
SHA256
e6c05261c41c0c41f3ee4057bc82a976912c1e3ab763f96195dff657e2d8af27
-
SHA512
bd02dca890494efb02f6a7c976c469aa9f144af183080ecbafce5789d01d1e9d2ae608f15334766bd26b3d7d27aaa05cf9d4c1ea4a8ba0ce2f35554e32dbad03
-
SSDEEP
24576:DhJk21v84aY0tOyMfn2I6a281MNtv2g5y2cZ/HfMXLCYFLkgKB38Ug:Dhl1CuOHOmB2icZ/L6LkzP
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/2500-1-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral2/memory/2500-5-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral2/memory/2500-4-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral2/memory/2500-14-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral2/memory/2500-23-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral2/memory/2500-20-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral2/memory/2500-25-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral2/memory/2500-32-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral2/memory/2500-37-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral2/memory/2500-46-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral2/memory/2500-53-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral2/memory/2500-50-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral2/memory/2500-48-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral2/memory/2500-43-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral2/memory/2500-41-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral2/memory/2500-39-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral2/memory/2500-34-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral2/memory/2500-29-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral2/memory/2500-27-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral2/memory/2500-18-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral2/memory/2500-16-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral2/memory/2500-11-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral2/memory/2500-9-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral2/memory/2500-7-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral2/memory/2500-6-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral2/memory/2500-3-0x0000000010000000-0x000000001003D000-memory.dmp upx behavioral2/memory/2500-65-0x0000000010000000-0x000000001003D000-memory.dmp upx -
Suspicious use of SetWindowsHookEx 5 IoCs
pid Process 2500 5ed8f9837590b396ee9bff40bcbc3fa5.exe 2500 5ed8f9837590b396ee9bff40bcbc3fa5.exe 2500 5ed8f9837590b396ee9bff40bcbc3fa5.exe 2500 5ed8f9837590b396ee9bff40bcbc3fa5.exe 2500 5ed8f9837590b396ee9bff40bcbc3fa5.exe