Analysis
-
max time kernel
140s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
30/12/2023, 05:50
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
10664cf319ab4dd05e4c4cd7e18f72e4.exe
Resource
win7-20231215-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
10664cf319ab4dd05e4c4cd7e18f72e4.exe
Resource
win10v2004-20231215-en
4 signatures
150 seconds
General
-
Target
10664cf319ab4dd05e4c4cd7e18f72e4.exe
-
Size
21KB
-
MD5
10664cf319ab4dd05e4c4cd7e18f72e4
-
SHA1
943b3d076fa3cf4ca34121b6d1ed98a6870265f6
-
SHA256
90bb988f71beea55327a107c567f740ab41144d149b433f800c9e88c29db8dc7
-
SHA512
ba6c82c3ff40f71417f6021a06cdbeb22259ddf70c64c20eb2423cec76fc1e3ab06393c3af62bd72887364e01790064ef6367412acf395769a9857afedd54851
-
SSDEEP
384:IFgoxqABEu+mkHgXldzGaf3cKK3hUeFcUZNRMIUUueTXTZ:xuELJgVEazYGIU1eTV
Score
7/10
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 1644 10664cf319ab4dd05e4c4cd7e18f72e4.exe -
Drops file in System32 directory 1 IoCs
description ioc Process File created C:\Windows\SysWOW64\SysWFGwd2.dll 10664cf319ab4dd05e4c4cd7e18f72e4.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 1644 10664cf319ab4dd05e4c4cd7e18f72e4.exe 1644 10664cf319ab4dd05e4c4cd7e18f72e4.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1644 10664cf319ab4dd05e4c4cd7e18f72e4.exe