Analysis
-
max time kernel
173s -
max time network
187s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
26/12/2023, 11:17
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6a39cf8237cdd5e65833032babec07cb.exe
Resource
win7-20231215-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
6a39cf8237cdd5e65833032babec07cb.exe
Resource
win10v2004-20231215-en
3 signatures
150 seconds
General
-
Target
6a39cf8237cdd5e65833032babec07cb.exe
-
Size
16KB
-
MD5
6a39cf8237cdd5e65833032babec07cb
-
SHA1
077e1e15c0113ba354ea41a3b912ed90a0f73462
-
SHA256
d00d21e3f3231a88391514e72972c2a9998f529ae045b910079f2d2d89cbc5b2
-
SHA512
900f6c2a5c99a9ab6988f28377ecb0f086c4fc2785ac9cc1ca380c25e33285c133dea12727a82d3e8464f539f5970c70fe323d448dbfc9dc5c7bdb4cea07770f
-
SSDEEP
192:12r5HWHXot6+bYMhnrDLAL3z/68+KYYt7oHKHA3z8o4E:12gJ+bXrDLALjX+RYuqA3n
Score
1/10
Malware Config
Signatures
-
Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\regeditool 6a39cf8237cdd5e65833032babec07cb.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 384 6a39cf8237cdd5e65833032babec07cb.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 384 6a39cf8237cdd5e65833032babec07cb.exe