Analysis
- max time kernel
0s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20231222-en - resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system - submitted
28/12/2023, 22:38
Behavioral task
behavioral1
Sample
fd544c7227b9b0ed1fee3639460fbc66.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
fd544c7227b9b0ed1fee3639460fbc66.exe
Resource
win10v2004-20231222-en
2 signatures
150 seconds
General
- Target fd544c7227b9b0ed1fee3639460fbc66.exe
- Size 384KB
- Sample231228-2kwptaaea7
- SHA256 32ab267ac680de49afad7e1fba643b54928c085b85081568ae89240a118dc626
- MD5 fd544c7227b9b0ed1fee3639460fbc66
- SHA1 8d6db814aff502928540a24d52f1014a142751d2
- SHA512 b1e462e82546c82289c64f2aa61ec50d24c6ef367d9653e9f45a4dbfcb96523da87f502a7c89bfc020746f39b548b255a9cc648876203571236299566ca81294
- SSDEEP 6144:Ql86zkvDej/Kn7HOnKremGM8HL7/+qhBHYdYdKRGsp/0UcXjEEz:Ql8cEQyn7Vq1M8HLrHFI+Tn
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/3016-0-0x0000000000400000-0x0000000000520000-memory.dmp vmprotect behavioral2/memory/3016-2-0x0000000000400000-0x0000000000520000-memory.dmp vmprotect behavioral2/memory/3016-18-0x0000000000400000-0x0000000000520000-memory.dmp vmprotect - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 3016 fd544c7227b9b0ed1fee3639460fbc66.exe 3016 fd544c7227b9b0ed1fee3639460fbc66.exe 3016 fd544c7227b9b0ed1fee3639460fbc66.exe 3016 fd544c7227b9b0ed1fee3639460fbc66.exe